Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/05/04 8:21 p.m.•15 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

8.8CVSS6AI score0.00691EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•16 views

PT-2026-36151

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

5.7AI score0.00691EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/30 12:00 a.m.•10 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

6AI score0.00691EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/30 12:00 a.m.•30 views

CVE-2026-36762

JeeSite v5.15.1 is vulnerable to a path traversal flaw in the /a/file/upload endpoint due to an issue in the fileEntityId parameter. This allows authenticated attackers with file upload permissions to write arbitrary files—using whitelisted suffixes—to arbitrary filesystem locations. While SSVC m...

5.7AI score0.00691EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/30 12:00 a.m.•9 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

5.7AI score0.00691EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/30 12:00 a.m.•40 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

0.00691EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•0 views

CVE-2026-36762: Improper Limitation of a Pathname to a Restricted Directory

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

8.8CVSS6.2AI score0.00691EPSS
SaveExploits0References2
Rows per page
Query Builder