JeeWMS Path Traversal Vulnerability in cgformTemplateController.do?doAdd
Vulnerability
A critical path traversal vulnerability has been identified in JeeWMS versions prior to 20250504. The issue arises in the doAdd function of the cgformTemplateController, allowing remote attackers to manipulate file paths and potentially access restricted files.
Impact
Exploitation of this vulnerability allows for path traversal, which could lead to unauthorized file access on the server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.8exploitability
5.2remediation
0.0relevance
0.1threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.