CVE-2023-34660

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface...

CVE-2023-34660

Vulnerability pattern confirmed for jjeecg-boot V3.5.0: an unauthorized arbitrary file upload in the /jeecg-boot/jmreport/upload endpoint. Affected component is the jmreport upload interface; root cause described as unrestricted/unauthorized file upload. Documented impact indicates potential high...