lingochamp/FileDownloader

lingochamp/FileDownloader

Multitask、MultiThread(MultiConnection)、Breakpoint-resume、High-concurrency、Simple to use、Single/NotSingle-process

CVE History

CVEPublishedCVSS v2CVSS v3
CVE-2018-112489.8 CRITICAL7.5 HIGH
util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal.