Medium · 6.5 CVE-2023-34660 EUVD-2023-1832GHSA-jf2f-hvxx-4rqx

jeecg-boot unrestricted file upload vulnerability

Published Jun 16, 2023 · Updated Dec 17, 2024 · Assigned by mitre

Description

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-parent	<= 3.5.0	—	GHSA-jf2f-hvxx-4rqx