GHSA-jf2f-hvxx-4rqx

ghsaUSosv

jeecg-boot unrestricted file upload vulnerability

view advisory published 2023-06-16Licence: CC-BY-4.0

jeecg-boot V3.5.0 has an unauthorized arbitrary file upload in `/jeecg-boot/jmreport/upload` interface.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-34660US	medium6.5	0.64% (50th)	—	2023-06-16
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.