CVE-2022-2647: jeecg-boot unrestricted upload

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-04 · updated 2026-06-17
Weakness: CWE-434

Description

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability.

Affected products

JeecgBoot: all versions

References

https://vuldb.com/?id.205594
https://www.cnblogs.com/J0o1ey/p/16550583.html
https://vuldb.com/?id.205594
https://www.cnblogs.com/J0o1ey/p/16550583.html

Get alerted when CVE-2022-2647 or the next vulnerability affects your stack