CVE-2025-5387

A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-05-31

Last modified

2025-06-02

Weaknesses

CWE-266, CWE-284

Affected products

• Jeewms (Huayi-tec)

References

• https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
• https://vuldb.com/?ctiid.310680
• https://vuldb.com/?id.310680