CVE-2026-7603

JeecgBoot up to 3.9.1 is affected by a vulnerability in the LoadFile Endpoint, specifically the checkPathTraversalBatch function in FileDownloadUtils.java. This enables server-side request forgery due to manipulation of the files argument and can be exploited remotely. Public exploitation is indi...

CVE-2026-7603: Server-Side Request Forgery (SSRF)

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This manipulation of the argument files causes server-side request forgery. It is possible to initiate the...