CVE-2025-60268
An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution.
Vendor
Product
CWE
Yayın Tarihi
2025-10-10 18:15:39
Güncelleme
2025-10-16 15:39:43
Source Identifier
cve@mitre.org
KEV Date Added
-