Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-5385 EUVD-2025-16565GHSA-q765-jvvr-jmgw

JeeWMS cgformTemplateController.do doAdd path traversal

Published May 31, 2025 · Updated Jun 2, 2025 · Assigned by VulDB

Description

A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products

VendorProductAffectedFixed
— JeeWMS 20250504 —

References