Description
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
Remediation
References
https://github.com/Snakinya/Bugs/issues/1
Related Vulnerabilities
CVE-2018-11696 Vulnerability in npm package node-sass
CVE-2020-28459 Vulnerability in npm package markdown-it-decorate
CVE-2018-9207 Vulnerability in maven package org.webjars.bowergithub.blueimp:jquery-file-upload
CVE-2020-15135 Vulnerability in npm package save-server
CVE-2022-35204 Vulnerability in maven package org.webjars.npm:vite