Description
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.
High · 8.8
CVE-2026-75339
EUVD-2026-67323GHSA-f6hh-58p2-7rx3
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, a…
Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by mitre