Threats tagged 'ghsa-rw86-f997-g9mx'

A path traversal vulnerability exists in the getImgUrl function of WxActGoldeneggsPrizesController.java in jeecgboot jeewx-boot up to commit 641ab52c3e1845fec39996d7794c33fb40dad1dd. Manipulating the imgurl argument can lead to unauthorized file path access. The vulnerability can be exploited remotely. Although an initial fix was implemented, it can be bypassed with additional encoding techniques. No specific affected or fixed versions are provided due to the product's rolling release model. Public exploit code is available, but no confirmed in-the-wild exploitation has been reported. The CVSS score is 4.3 (medium severity).