~ / search / GHSA-v3v9-3jf4-5pxx

GHSA-v3v9-3jf4-5pxx

Jeecg P3 Biz Chat allows remote attackers to read arbitrary files

Source: GitHub Advisory Database (reviewed) High CVE-2023-33510

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.p3:jeecg-p3-biz-chat <= 1.0.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.

References

External links from the advisory. They lead to third-party sites.