CVE-2025-5389: JeeWMS File generateController.do dogenerateOne2Many access control
A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5389?
CVE-2025-5389 has been classified as critical due to its potential impact on access control.
How does CVE-2025-5389 affect JeeWMS File Handler?
CVE-2025-5389 affects JeeWMS File Handler versions up to and including 20250504 by allowing improper access control.
What components of JeeWMS are impacted by CVE-2025-5389?
The function dogenerateOne2Many in the generateController is the specific component impacted by CVE-2025-5389.
How can I mitigate the risks associated with CVE-2025-5389?
Mitigate the risks associated with CVE-2025-5389 by upgrading to a version of JeeWMS File Handler that is beyond 20250504.
Is there a fix available for CVE-2025-5389?
Yes, a fix for CVE-2025-5389 is available by updating to the latest version of JeeWMS File Handler.