CVE-2025-5390
JeeWMS File filedeal.do filedeal access control
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 31, 2025
- Updated
- Jun 2, 2025
- Reserved
- May 30, 2025
Description
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
JeeWMSn/a |
|
References
- VDB-310683 | JeeWMS File filedeal.do filedeal access controlvdb-entrytechnical-description
- VDB-310683 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNVissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.