CVE-2023-34660

MediumCVSS 6.5

Published: 16/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

46th percentile - higher than 46% of all known CVEs

Version 3.5.0 of jjeecg-boot has an unauthorized arbitrary file upload in the /jeecg-boot/jmreport/upload interface.

An attacker could exploit this vulnerability to upload malicious files, potentially compromising the system.

It is recommended to upgrade to the latest version of jjeecg-boot and implement proper authorization mechanisms for file uploads.

Original NVD description (English source)

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.