lamp-cloud vulnerabilities

A vulnerability in lamp-cloud up to version 5.10.0 affects an unknown part of DefGenProjectController.java in the Code Generator component. Manipulation of outputDir/parent/projectPrefix arguments leads to path traversal. The attack can be launched remotely, and the exploit has been publicly disclosed.

Dromara lamp-cloud up to version 5.6.2 has a template injection vulnerability in the Message Template Handler component. The GroovyClassLoader.parseClass function does not neutralize special elements in the DefMsgTemplate.content argument, allowing remote code execution. The exploit is publicly available.

In Dromara lamp-cloud up to version 5.8.1, an improper authorization vulnerability exists in the pageUser function of /defUser/pageUser in the DefUserController component. Remote exploitation is possible and the exploit is public.