jeecgboot/jeecg-boot · Security
Jeecg-Boot CMS arbitrary file upload vulnerability
- GHSA ID
- GHSA-jf7x-57g8-9hm5
- CVE ID
- CVE-2020-28088
- Severity
- critical
- Published
- Updated
Description
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
CWEs
- CWE-434 · Unrestricted Upload of File with Dangerous Type