A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 27, 2026 · NIST NVD

   Detected

   A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the argument img leads to server-side request forgery. The attack may be launched remotely. The exploit is

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the argument img leads to server-side request forgery. The attack may be launched remotely. The exploit is

Affected

• cpe itwanger/paicoding1.0.0
• cpe itwanger/paicoding1.0.1
• cpe itwanger/paicoding1.0.2
• cpe itwanger/paicoding1.0.3

Sources

• CVE.orgVulnerability recordCVE-2026-3286

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-3286

  A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such man

  nvd.nist.gov

References

• Exploit · fx4tqqfvdw4.feishu.cn
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com