CVE-2025-5385: JeeWMS cgformTemplateController.do doAdd path traversal
Published May 31, 2025
·Updated
A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Affected Software
2 affected components
Jeewms JeeWMS<=20250504
Huayi-tec Jeewms<=2025-05-04
Event History
May 31, 2025
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5385?
The severity of CVE-2025-5385 is classified as critical.
2
What type of vulnerability is CVE-2025-5385?
CVE-2025-5385 is a path traversal vulnerability.
3
How does the CVE-2025-5385 vulnerability affect JeeWMS?
CVE-2025-5385 allows an attacker to manipulate the doAdd function for unauthorized file access.
4
Can CVE-2025-5385 be exploited remotely?
Yes, CVE-2025-5385 can be initiated remotely.
5
How can I mitigate CVE-2025-5385?
Mitigation for CVE-2025-5385 involves updating to a version of JeeWMS beyond 20250504.