GitHub Advisoryadvisory · Maven

GHSA-pm8v-ppx7-8hr4 Jeecg boot arbitrary file read vulnerability

HIGH Published 2023-09-08 Modified 2024-09-26 Official page ↗
Aliases
CVE-2023-41578
Ecosystem
Maven
Packages
org.jeecgframework.boot:jeecg-boot-parent
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2023-09-11

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-parent: <= 3.5.3 (no fix yet)

Description

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface `/testConnection`.

Related

Alias · CVE (1)

  • CVE-2023-41578 Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References