CVE-2025-4533 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/kn…
Medium CVSS: 5.1

CVE-2025-4533

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Vendor
Jeecg
Product
Jeecg Boot
CWE
CWE-400
Yayın Tarihi
2025-05-11 07:15:15
Güncelleme
2025-12-31 01:00:06
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-400 Jeecg Boot MEDIUM Jeecg 2025

Referanslar

https://github.com/jeecgboot/JeecgBoot/issues/8199 https://github.com/jeecgboot/JeecgBoot/issues/8199#issue-3022937633 https://github.com/jeecgboot/JeecgBoot/issues/8199#issuecomment-2834691016 https://vuldb.com/?ctiid.308278 https://vuldb.com/?id.308278 https://vuldb.com/?submit.566192