~ / search / GHSA-pm8v-ppx7-8hr4

GHSA-pm8v-ppx7-8hr4

Jeecg boot arbitrary file read vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-41578

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-parent <= 3.5.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface `/testConnection`.

References

External links from the advisory. They lead to third-party sites.