CVE-2023-34660: Malicious File Upload
Published Jun 16, 2023
·Updated
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Affected Software
2 affected components
Jeecg jeecg boot=3.5.0
Jeecg jeecg boot=3.5.1
Event History
Jun 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-34660?
CVE-2023-34660 is a vulnerability in jjeecg-boot V3.5.0 that allows unauthorized arbitrary file upload in the /jeecg-boot/jmreport/upload interface.
2
How severe is CVE-2023-34660?
CVE-2023-34660 has a severity score of 6.5 out of 10, which is considered medium.
3
How does CVE-2023-34660 affect software?
CVE-2023-34660 affects jjeecg-boot versions 3.5.0 and 3.5.1.
4
How can I fix CVE-2023-34660?
To fix CVE-2023-34660, upgrade to a patched version of jjeecg-boot.
5
Where can I find more information about CVE-2023-34660?
You can find more information about CVE-2023-34660 at the following reference: [GitHub Issue](https://github.com/jeecgboot/jeecg-boot/issues/4990).