Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/jeecgboot/JeecgBoot/issues/8826 |
|
History
Wed, 01 Oct 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-24 | |
| Metrics |
cvssV3_1
|
Wed, 01 Oct 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-10-01T20:19:14.279Z
Reserved: 2025-09-26T00:00:00.000Z
Link: CVE-2025-61188
Vulnrichment
Updated: 2025-10-01T20:19:09.392Z
NVD
Status : Received
Published: 2025-10-01T20:18:38.980
Modified: 2025-10-01T21:16:45.167
Link: CVE-2025-61188
Redhat
No data.
OpenCVE Enrichment
No data.