bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.