JEEWMS Zip Slip Vulnerability in MigrateForm Component Allows Arbitrary Code Execution

A zip slip vulnerability has been identified in JEEWMS version 3.7, specifically within the MigrateForm.java component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted Zip file. The issue arises because the application does not properly validate the contents of the Zip file during the extraction process, enabling malicious files to be overwritten and potentially executed.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the server where JEEWMS is running.

Reproduction

To reproduce this vulnerability, upload a Zip file containing a JSP file through the 'doMigrateIn' endpoint of the 'cgformSqlController' controller. The uploaded Zip file will be extracted without proper validation, allowing the included JSP file to be executed on the server.