CVE-2026-51859 Details
Description
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).
A directory traversal vulnerability has been identified in Bisheng versions 2.3.0, 2.4.0, and 2.4.0-beta1. The issue arises in the 'save_download_file' function within 'src/backend/bisheng/core/cache/utils.py', where user-supplied filenames are not properly sanitized before being used to construct file paths. This flaw allows attackers to manipulate the filename parameter to traverse directories and write files to arbitrary locations on the server.
Users are advised to update to Bisheng version 3.0.0, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/Ro1ME/df160925a60dd917550f7c87bfe62519 | [email protected] | ExploitTechnical Description |
| https://github.com/dataelement/bisheng/issues/1994 | [email protected] | BundleExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| bisheng | 2.3.0 (semver) 2.4.0 (semver) 2.4.0-beta1 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 30, 2026 | New CVE Received | [email protected] |