Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/05/04 8:21 p.m.•19 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

8.8CVSS6.3AI score0.00691EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/30 12:00 a.m.•12 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

6.3AI score0.00691EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/30 12:00 a.m.•44 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

0.00691EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/30 12:00 a.m.•36 views

CVE-2026-36762

JeeSite v5.15.1 , a Java rapid development platform, contains a path traversal vulnerability in the fileEntityId parameter of the /a/file/upload endpoint. This flaw allows authenticated attackers with file upload permissions to traverse the directory structure and write arbitrary files (containin...

8.8CVSS6.3AI score0.00691EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•5 views

CVE-2026-36762: Improper Limitation of a Pathname to a Restricted Directory

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

8.8CVSS6.3AI score0.00691EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/30 12:00 a.m.•11 views

CVE-2026-36762

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

6.3AI score0.00691EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•20 views

PT-2026-36151

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations...

6.3AI score0.00691EPSS
SaveExploits0References3
Rows per page
Query Builder