Description
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
Remediation
References
https://github.com/Snakinya/Bugs/issues/1
Related Vulnerabilities
CVE-2021-39154 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2022-25927 Vulnerability in maven package org.webjars.npm:github-com-faisalman-ua-parser-js
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2021-25931 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2022-41940 Vulnerability in maven package org.webjars.bower:engine.io