Description
A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of the file /index of the component Shiro Configuration. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| 猫宁i | Morning | bc782730c74ff080494f145cc363a0b4f43f7d3e |
References
- https://gitee.com/morning-pro/Morning/issues/ICOVAKExploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.319344Permissions Required, VDB Entry
- https://vuldb.com/?id.319344Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.622348Exploit, Third Party Advisory, VDB Entry
- https://gitee.com/morning-pro/Morning/issues/ICOVAKExploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?submit.622348Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Aug 10, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed