Description
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/4990
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package org.webjars.npm:bootstrap-sass
CVE-2017-16030 Vulnerability in maven package org.webjars.npm:useragent
CVE-2018-1000536 Vulnerability in npm package medis
CVE-2023-22465 Vulnerability in maven package org.http4s:http4s-core_2.13
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport-native-unix-common-tests