CVE:CVE-2023-4172
CNNVD:CNNVD-202308-342
Chengdu Flash Flood Disaster Monitoring and Warning System是一个成都市山洪灾害监测预警系统。
Chengdu Flash Flood Disaster Monitoring and Warning System 2.0版本存在安全漏洞，该漏洞源于对参数FileDirectory的错误操作会导致绝对路径遍历。
solution:Upgrade cdwanjiang flash_flood_disaster_monitoring_and_warning_system to a higher version than 2.0,and avoid the version 2.0