GHSA-jf7x-57g8-9hm5

Source

https://github.com/advisories/GHSA-jf7x-57g8-9hm5

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jf7x-57g8-9hm5/GHSA-jf7x-57g8-9hm5.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jf7x-57g8-9hm5

Aliases

CVE-2020-28088

Published

2022-05-24T19:10:22Z

Modified

2023-11-08T04:03:23.613541Z

Summary

Jeecg-Boot CMS arbitrary file upload vulnerability

Details

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

Database specific

{
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-434"
    ],
    "github_reviewed_at": "2023-07-13T23:25:51Z",
    "nvd_published_at": "2021-08-06T23:15:00Z",
    "severity": "CRITICAL"
}

References

Affected packages

Maven / org.jeecgframework.boot:jeecg-boot-parent

Package

Name: org.jeecgframework.boot:jeecg-boot-parent; View open source insights on deps.dev
Purl: pkg:maven/org.jeecgframework.boot/jeecg-boot-parent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

2.3