JeeSite 安全漏洞

JeeSite is a Java rapid development platform open-sourced by Jinan Zhuoyuan thinkgem. JeeSite versions 5.15.1 and earlier have security vulnerabilities, which stem from operations on the connection processor component, potentially leading to path traversal attacks...

CVE-2025-7403

Unsafe handling in btconntxprocessor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes are attacker-controlled, enabling precise memory corruption...

CVE-2021-39659

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...