cvedb.io
CVE-2025-5385
MEDIUM · CVSS 6.3
EPSS exploitation probability: 0%
Published 2025-05-31T17:15:20.230 · Last modified 2026-06-17T09:47:49.047

Summary

A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products

huayi-tec — jeewms

Does this affect you?

Add your gear to cvedb and we'll alert you only when huayi-tec ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.