Description
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/4990
Related Vulnerabilities
CVE-2023-40809 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2020-15362 Vulnerability in npm package wifiscanner
CVE-2023-4043 Vulnerability in maven package org.eclipse.parsson:parsson
CVE-2023-26136 Vulnerability in npm package tough-cookie
CVE-2016-3081 Vulnerability in maven package org.apache.struts:struts2-core