Lucene search
Veracode Vulnerability DatabaseVERACODE:36605HistoryAug 05, 2022 - 4:06 a.m.
Arbitrary File Upload
2022-08-0504:06:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.003 Low
EPSS
Percentile
68.3%
jeecg-boot-base-core is vulnerable to arbitrary file upload. The vulnerability exists due to the lack of file type checks in the fileTypeFilter function of FileTypeFilter.java, allowing an attacker to upload malicious files through the file /api/. path.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jeecg-boot-base-core | eq | 3.0 | |
| jeecg-boot-base-core | eq | 3.0 |
Related
prion
prion
Out-of-bounds
2022-08-04 09:15:00
cve
cve
CVE-2022-2647
2022-08-04 09:15:08
cvelist
cvelist
CVE-2022-2647 jeecg-boot unrestricted upload
2022-08-04 08:41:11
nvd
nvd
CVE-2022-2647
2022-08-04 09:15:08