CVE-2025-61189
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.
Vendor
Product
CWE
Yayın Tarihi
2025-10-01 20:18:39
Güncelleme
2025-10-07 14:42:52
Source Identifier
cve@mitre.org
KEV Date Added
-