CVE-2025-7864 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the function Upload of the file src/main/java/com/j…
Medium CVSS: 5.3

CVE-2025-7864

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the function Upload of the file src/main/java/com/jeesite/modules/file/web/FileUploadController.java. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 3585737d21fe490ff6948d913fcbd8d99c41fc08. It is recommended to apply a patch to fix this issue.
Vendor
Jeesite
Product
Jeesite
CWE
CWE-284
Yayın Tarihi
2025-07-20 03:15:24
Güncelleme
2025-08-25 17:25:45
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-284 Jeesite MEDIUM Jeesite 2025

Referanslar

https://github.com/thinkgem/jeesite5/commit/3585737d21fe490ff6948d913fcbd8d99c41fc08 https://github.com/thinkgem/jeesite5/issues/31 https://github.com/thinkgem/jeesite5/issues/31#issuecomment-3051363397 https://vuldb.com/?ctiid.316977 https://vuldb.com/?id.316977 https://vuldb.com/?submit.618189 https://github.com/thinkgem/jeesite5/issues/31