VYPR
← All advisories
Medium severity6.3NVD Advisory· Published May 31, 2025· Updated Jun 17, 2026

CVE-2025-5385

CVE-2025-5385

Description

A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Jeewms/Jeewmscpe-rescue3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:a:huayi-tec:jeewms:*:*:*:*:*:*:*:*range: <=2025-05-04
    • (no CPE)range: <=20250504

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.