GHSA-jf7x-57g8-9hm5

ghsaUSosv

Jeecg-Boot CMS arbitrary file upload vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

An arbitrary file upload vulnerability in `/jeecg-boot/sys/common/upload` of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-28088US	critical9.8	2.34% (84th)	—	2021-08-06
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.