5 matches found
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
5.3CVSS7AI score0.11215EPSS
SaveExploits1
CVE-2023-41599
creationtimestamp| type| source ---|---|--- 2023-09-19 07:28:59+00:00| seen| https://t.me/cibsecurity/70694...
5.3CVSS5.5AI score0.11215EPSS
SaveExploits1References1
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
7AI score0.11215EPSS
SaveExploits1References1
CVE-2023-41599
CVE-2023-41599 : JFinalCMS v5.0.0 contains a directory traversal vulnerability in /common/DownController.java. Unauthenticated attackers can read arbitrary files from the server via path traversal in the filekey parameter, potentially exposing credentials and sensitive CMS content. The connected ...
5.3CVSS5.4AI score0.11215EPSS
SaveExploits1References1Affected Software1
20