CVE-2025-5387: JeeWMS File generateController.do dogenerate access control
A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5387?
CVE-2025-5387 is classified as a critical vulnerability.
What component is affected by CVE-2025-5387?
CVE-2025-5387 affects the File Handler component in JeeWMS.
How do I fix CVE-2025-5387?
To fix CVE-2025-5387, it is recommended to update JeeWMS to a version later than 20250504.
What type of vulnerability is CVE-2025-5387?
CVE-2025-5387 is categorized as an improper access control vulnerability.
What is the potential impact of CVE-2025-5387?
The potential impact of CVE-2025-5387 includes unauthorized access due to improper access controls.