JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.

Published Jan 14, 2025 · Updated Feb 3, 2025 · Assigned by mitre