Unrated severityNVD Advisory· Published Oct 1, 2025· Updated Oct 1, 2025
CVE-2025-61189
CVE-2025-61189
Description
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.
Affected products
2- Jeecgboot/Jeecgbootdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.