CVE-2025-3214

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

CVE-2025-3214: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

PT-2025-14855 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS versions up to 5.2.4 Description: A vulnerability has been found in the function engine.getTemplate of the file /readTemplate, where the manipulation of the template argument leads to path traversal. The attack can be launched...

JFinalCMS path traversal vulnerability

JFinalCMS is a content management system by heyewei individual developer. A path traversal vulnerability exists in JFinalCMS 5.2.4 and earlier versions, which stems from a path traversal in the readTemplate file...