Threats tagged 'ghsa-hw83-j72w-q54c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.6	CVE-2026-36760Path Traversal Critical9.62026-04-30GCVE DatabaseCVE-2026-36760 JeeSite v5.15.1 contains a vulnerability in the fileMd5 parameter of the /a/file/upload endpoint that allows authenticated users with file upload permissions to perform path traversal attacks. This enables writing arbitrary files with allowed suffixes to any location on the filesystem when chunked upload is enabled. Report on CVE-2026-36760 Vulnerability CWE-22 #ghsa-hw83-j72w-q54c	GCVE Database	2026-04-30

Page 1 of 1