Advisories · Technology
thinkgem JeeSite.
Every CVE that names thinkgem JeeSite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
- thinkgem JeeSite
- Broken access control
- CVSS 2.3 Low
thinkgem JeeSite Connection path traversal
- thinkgem JeeSite
- Path traversal
- CVSS 2.3 Low
thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference
- thinkgem JeeSite
- XML external entities (XXE)
- CWE-610
- CVSS 5.1 Medium
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
- thinkgem JeeSite
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
- thinkgem JeeSite
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
thinkgem JeeSite FileUploadController.java upload unrestricted upload
- thinkgem JeeSite
- Broken access control
- Unrestricted file upload
- CVSS 5.1 Medium
thinkgem JeeSite ServletUtils.java redirectUrl
- thinkgem JeeSite
- Open redirect
- CVSS 5.3 Medium
thinkgem JeeSite SsoController.java sso redirect
- thinkgem JeeSite
- Open redirect
- CVSS 5.3 Medium
thinkgem JeeSite Site Controller SiteController.java select redirect
- thinkgem JeeSite
- Open redirect
- CVSS 5.3 Medium
thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery
- thinkgem JeeSite
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
- thinkgem JeeSite
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
thinkgem JeeSite Cookie login cross site scripting
- thinkgem JeeSite
- Cross-site scripting (XSS)