CVE-2026-2945 JeecgBoot uploadImgByHttp server-side request forgery

A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has bee...

PT-2021-11444

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: An arbitrary file upload vulnerability in the "/jeecg-boot/sys/common/upload" API endpoint of jeecg-boot CMS allows attackers to execute arbitrary code. Recommendations: For jeecg-boot CMS version 2.3,...

CVE-2020-28088: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...