High · 7.5 CVE-2023-41578 EUVD-2023-2563GHSA-pm8v-ppx7-8hr4

Jeecg boot arbitrary file read vulnerability

Published Sep 8, 2023 · Updated Sep 26, 2024 · Assigned by mitre

Description

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-parent	<= 3.5.3	—	GHSA-pm8v-ppx7-8hr4