Liulishuo Filedownloader — known CVE vulnerabilities

Every CVE whose affected-product data names Liulishuo Filedownloader, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2018-11248 — CVSS 9.8 (critical): util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the…