Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2025-61188

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.

  • Published: Oct 1, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-61188
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWEs:

Software From Fixed in
jeecg / jeecg_boot - 3.8.2.x