Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2026/05/02 4:15 a.m.0 views

CVE-2026-7603 JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This manipulation of the argument files causes server-side request forgery. It is possible to initiate the...

6.5CVSS6.2AI score0.00018EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/02 4:15 a.m.1 views

EUVD-2026-26738

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This manipulation of the argument files causes server-side request forgery. It is possible to initiate the...

6.5CVSS6.2AI score0.00018EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/02 4:15 a.m.0 views

CVE-2026-7603

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This manipulation of the argument files causes server-side request forgery. It is possible to initiate the...

6.5CVSS6.2AI score0.00018EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/02 12:0 a.m.3 views

JeecgBoot 代码问题漏洞

JeecgBoot is a Java low-code platform developed by Jeecg Corporation, designed for enterprise web applications. Versions of JeecgBoot 3.9.1 and earlier contain code vulnerabilities. These vulnerabilities stem from improper handling of parameters in the checkPathTraversalBatch function of the...

6.5CVSS6.7AI score0.00018EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/02 12:0 a.m.1 views

PT-2026-36570

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This manipulation of the argument files causes server-side request forgery. It is possible to initiate the...

6.5CVSS5.5AI score0.00018EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.2 views

Sangfor Next-Gen Application Firewall Security Vulnerabilities

Sangfor Next-Gen Application Firewall Sangfor NGAF is an application firewall from China-based Sangfor. A security vulnerability exists in Sangfor Next-Gen Application Firewall NGAF version 8.0.17, which allows an authenticated attacker to read arbitrary system files using the svpnhtml/loadfile.p...

6.5CVSS6.7AI score0.05156EPSS
Exploits1References5
Rows per page
Query Builder