Threats tagged 'ghsa-59hr-3pcc-42pg'

A server-side request forgery (SSRF) vulnerability exists in JeecgBoot up to version 3.9.1 affecting the uploadImgByHttp endpoint. The flaw involves the CommonController.uploadImgByHttp function and related utilities, allowing remote attackers to manipulate requests. The vendor has confirmed the issue and plans to release a fix in a future update. Public exploit code is available. The vulnerability has a CVSS score of 6.3, indicating medium severity.