Unauthorized File Upload Vulnerability in jeecg-boot by Jeecg
CVE-2023-34660

6.5MEDIUM

Key Information:

Vendor

Jeecg

Status
Jeecg Boot
Vendor
CVE Published:
16 June 2023

What is CVE-2023-34660?

jeecg-boot version 3.5.0 is prone to an unauthorized arbitrary file upload vulnerability via the /jeecg-boot/jmreport/upload interface. This flaw could allow unprivileged users to upload malicious files, potentially compromising the integrity of the server and the confidentiality of sensitive data.

References

https://github.com/jeecgboot/jeecg-boot/issues/4990

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.