CVE-2021-48015

The JeeWMS warehouse management system (versions prior to commit 0a610e8 ) is vulnerable to an unauthenticated path traversal vulnerability. A remote attacker can send GET requests to the /systemController/showOrDownByurl.do endpoint using ../ sequences within the dbPath parameter to bypass the A...