Skip to content
OpenAdvisories

Vendor

thinkgem

12 known vulnerabilities.

Products

4 results · Clear filters · Feed

  • Low 3.1

    thinkgem JeeSite Connection path traversal

    A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considere…

  • Low 3.5

    thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting

    A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack …

  • Low 3.5

    thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting

    A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulatio…

  • Low 3.5

    thinkgem JeeSite ServletUtils.java redirectUrl

    A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/main/java/com/jeesite/common/web/http/ServletUtils.java. The manipulation of the argument url leads to…