CVE-2026-19756

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-19756

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19756.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-19756

Published

2026-08-13T22:30:10.915Z

Modified

2026-08-16T03:31:31.173040753Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal

Details

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0"
                },
                {
                    "introduced": "5.1"
                },
                {
                    "last_affected": "5.1"
                },
                {
                    "introduced": "5.2"
                },
                {
                    "last_affected": "5.2"
                },
                {
                    "introduced": "5.3"
                },
                {
                    "last_affected": "5.3"
                },
                {
                    "introduced": "5.7"
                },
                {
                    "last_affected": "5.7"
                },
                {
                    "introduced": "5.8"
                },
                {
                    "last_affected": "5.8"
                },
                {
                    "introduced": "5.9"
                },
                {
                    "last_affected": "5.9"
                },
                {
                    "introduced": "5.10.0"
                },
                {
                    "last_affected": "5.10.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19756.json"
}

References

Affected packages

Git / github.com/dromara/lamp-cloud

Affected ranges

Type

GIT

Repo

https://github.com/dromara/lamp-cloud

Events

Introduced

1d0243a578e4db59d84d29aaf129d5ff4999ba6d

Last affected

63158f26c27298b485e85dd843327f53ed7383ae

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

5.*

5.4

5.4.0

5.5

5.5.0

5.5.1

5.6

5.6.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19756.json"