Jeesite vulnerabilities

Products

• Jeesite 19

Newest

• jeesite thinkgem JeeSite Connection path traversal CVE-2026-3405 2.3 LowMarch 2, 2026
• jeesite thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference CVE-2026-3404 2.3 LowMarch 2, 2026
• jeesite thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting CVE-2025-9796 5.1 MediumSeptember 1, 2025
• jeesite thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting CVE-2025-7865 5.1 MediumJuly 20, 2025
• jeesite thinkgem JeeSite FileUploadController.java upload unrestricted upload CVE-2025-7864 5.3 MediumJuly 20, 2025
• jeesite thinkgem JeeSite ServletUtils.java redirectUrl CVE-2025-7863 5.1 MediumJuly 20, 2025
• jeesite thinkgem JeeSite SsoController.java sso redirect CVE-2025-7785 5.3 MediumJuly 18, 2025
• jeesite thinkgem JeeSite Site Controller SiteController.java select redirect CVE-2025-7763 5.3 MediumJuly 17, 2025
• jeesite thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery CVE-2025-7759 5.3 MediumJuly 17, 2025
• jeesite thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery CVE-2025-5186 5.3 MediumMay 26, 2025
• jeesite thinkgem JeeSite Cookie login cross site scripting CVE-2024-8112 6.9 MediumAugust 23, 2024
• jeesite An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows... CVE-2023-38991 5.4 MediumAugust 3, 2023
• jeesite An issue in the delete function in the MenuController class of jeesite v1.2.6 allows... CVE-2023-38990 4.3 MediumAugust 1, 2023
• jeesite An issue in the delete function in the UserController class of jeesite v1.2.6 allows... CVE-2023-38989 4.3 MediumJuly 31, 2023
• jeesite An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows... CVE-2023-38988 4.3 MediumJuly 28, 2023
• jeesite Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the... CVE-2023-34601 9.8 CriticalJune 22, 2023
• jeesite Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this... CVE-2020-19229 9.8 CriticalApril 5, 2022
• jeesite Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The... CVE-2019-1010201 6.5 MediumJuly 23, 2019
• jeesite Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information... CVE-2019-1010202 6.5 MediumJuly 23, 2019