Description
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/4990
Related Vulnerabilities
CVE-2023-47320 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2022-38900 Vulnerability in maven package org.webjars.npm:decode-uri-component
CVE-2023-26476 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki
CVE-2019-13236 Vulnerability in maven package org.opencms:opencms-core
CVE-2023-40810 Vulnerability in maven package org.opencrx:opencrx-core-models