cbcvebase.

Guojusoft Jeecg vulnerabilities

1 known vulnerability affecting guojusoft/jeecg.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-23083P2CRITICALCVSS 9.8≤ 4.02021-05-03
CVE-2020-23083 [CRITICAL] CWE-434 CVE-2020-23083: Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".
nvd
Guojusoft Jeecg vulnerabilities | cvebase