~ / search / GHSA-jf7x-57g8-9hm5

GHSA-jf7x-57g8-9hm5

Jeecg-Boot CMS arbitrary file upload vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28088

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-parent <= 2.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file upload vulnerability in `/jeecg-boot/sys/common/upload` of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

References

External links from the advisory. They lead to third-party sites.