4 matches found
CVE-2020-20948
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...
7.5CVSS0.01318EPSS
SaveExploits1References1
Arbitrary file deletion
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...
5CVSS7.5AI score0.01318EPSS
SaveExploits1References1Affected Software1
CVE-2020-20948
CVE-2020-20948 affects jeecg v3.8, enabling arbitrary file download by modifying the localPath variable. The vulnerability stems from insufficient input validation/Access Control, allowing an attacker to access sensitive files. Exploitation status is not documented in the provided sources; no pat...
7.5CVSS7.5AI score0.01318EPSS
SaveExploits1References1Affected Software1
20