CVE-2024-57761

An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file.

Score

CVSS 3.1 8.1 High

Status

Analyzed - cve@mitre.org

Published

2025-01-15

Last modified

2025-02-03

Weaknesses

CWE-434

Affected products

• Jeewms (Huayi-tec)

References

• https://gitee.com/erzhongxmu/JEEWMS/issues/IBFTZ7