CVE-2025-5390: JeeWMS File filedeal.do filedeal access control

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-31 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Affected products

erzhongxmu JEEWMS: through 2025-05-04

References

https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
https://vuldb.com/?ctiid.310683
https://vuldb.com/?id.310683

Get alerted when CVE-2025-5390 or the next vulnerability affects your stack