CVE-2025-5390: JeeWMS File filedeal.do filedeal access control
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5390?
CVE-2025-5390 is classified as critical due to improper access controls.
How do I fix CVE-2025-5390?
To fix CVE-2025-5390, upgrade JeeWMS File Handler to a version beyond 20250504.
What component is affected by CVE-2025-5390?
CVE-2025-5390 affects the File Handler component of JeeWMS.
What type of vulnerability is CVE-2025-5390?
CVE-2025-5390 is classified as a vulnerability involving improper access controls.
Which versions of JeeWMS File Handler are vulnerable to CVE-2025-5390?
JeeWMS File Handler versions up to and including 20250504 are vulnerable to CVE-2025-5390.