jeesite v1.2.6 vulnerabilities

JeeSite version 5.15.1 contains a vulnerability in the fileEntityId parameter in the /a/file/upload endpoint, allowing authenticated attackers with file upload permissions to perform a path traversal attack and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations.

An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.