Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS1qZjd4LTU3ZzgtOWhtNc4AApc9

Jeecg-Boot CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

Permalink: https://github.com/advisories/GHSA-jf7x-57g8-9hm5
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qZjd4LTU3ZzgtOWhtNc4AApc9
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 2 years ago
Updated: over 1 year ago

EPSS Percentage: 0.01414
EPSS Percentile: 0.86216

Identifiers: GHSA-jf7x-57g8-9hm5, CVE-2020-28088
References:

Repository: https://github.com/zhangdaiscott/jeecg-boot
Blast Radius: 1.0

Affected Packages

maven:org.jeecgframework.boot:jeecg-boot-parent

Affected Version Ranges: <= 2.3
No known fixed version