← All advisories

High severity7.5NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026

CVE-2020-20948

CVE-2020-20948

Description

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.

Affected products

3

Jeecg/JEECG2 versions
cpe:2.3:a:jeecg:jeecg:3.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jeecg:jeecg:3.8:*:*:*:*:*:*:*
- (no CPE)range: <3.8
jeecg/jeecgdescription

Patches

Vulnerability mechanics

References

1

github.com/zhangdaiscott/jeecg/issues/50nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.