CVE-2025-5388: JeeWMS generateController.do dogenerate sql injection
A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5388?
CVE-2025-5388 is classified as a critical vulnerability.
How does CVE-2025-5388 affect JeeWMS?
CVE-2025-5388 affects the dogenerate function in the /generateController.do?dogenerate file, leading to SQL injection.
Can CVE-2025-5388 be exploited remotely?
Yes, CVE-2025-5388 can be exploited remotely.
What versions of JeeWMS are affected by CVE-2025-5388?
JeeWMS versions up to and including 20250504 are affected by CVE-2025-5388.
How can I mitigate the risk of CVE-2025-5388?
To mitigate the risk of CVE-2025-5388, update JeeWMS to a version beyond 20250504 that addresses the SQL injection vulnerability.