JeeWMS Path Traversal via showOrDownByurl.do
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
JeeWMS, a web-based management system, has a flaw that lets remote attackers without logging in read arbitrary files from the server. This could expose sensitive information, such as system configuration files.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do with ../ sequences in dbPath, which bypasses AuthInterceptor, to retrieve files like win.ini. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-17.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- erzhongxmu JeeWMS
From 194f221776cfcfd838abab7107b1a8352ea2bc59 · fixed in 0a610e8178a0a1197e9c6615b58faf67c406d2bc