TI-2026-02940 CVE-2026-3405 · GHSA-jhg4-f3vv-qv4p
thinkgem JeeSite Connection path traversal
Priority MEDIUM 45
A vulnerability has been found in thinkgem JeeSite up to 5.15.1.
Vulnerabilities
19 records
TI-2026-02939 CVE-2026-3404 · GHSA-7p6h-h74m-fpv3
thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference
Priority MEDIUM 45
A flaw has been found in thinkgem JeeSite up to 5.15.1.
TI-2025-08985 CVE-2025-9796 · GHSA-66x5-jrc5-2whj
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.1.
TI-2025-07189 CVE-2025-7865 · GHSA-g822-656r-fggc
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.0.
TI-2025-07188 CVE-2025-7864 · GHSA-4xh2-6c5f-qwx3
thinkgem JeeSite FileUploadController.java upload unrestricted upload
Priority MEDIUM 57
A vulnerability was found in thinkgem JeeSite up to 5.12.0.
TI-2025-07187 CVE-2025-7863 · GHSA-phqm-82j2-rc5x
thinkgem JeeSite ServletUtils.java redirectUrl
Priority MEDIUM 56
A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic.
TI-2025-07110 CVE-2025-7785 · GHSA-c67q-mx69-vv7w
thinkgem JeeSite SsoController.java sso redirect
Priority MEDIUM 57
A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0.
TI-2025-07088 CVE-2025-7763 · GHSA-4mjp-f7vp-45v6
thinkgem JeeSite Site Controller SiteController.java select redirect
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0.
TI-2025-07084 CVE-2025-7759 · GHSA-749h-h23p-gj86
thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery
Priority MEDIUM 57
A vulnerability was identified in thinkgem JeeSite up to 5.12.0.
TI-2025-04655 CVE-2025-5186 · GHSA-2988-fj4q-frxv
thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
Priority MEDIUM 57
A vulnerability was found in thinkgem JeeSite up to 5.11.1.
TI-2024-07521 CVE-2024-8112 · GHSA-jv3v-4vw7-mch5
thinkgem JeeSite Cookie login cross site scripting
Priority LOW 31
A vulnerability was found in thinkgem JeeSite 5.3.
TI-2023-20231 CVE-2023-38991 · GHSA-2w38-c69v-2x84
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows…
Priority MEDIUM 58
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.
TI-2023-20230 CVE-2023-38990 · GHSA-cv5g-f88q-2vr3
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows…
Priority MEDIUM 53
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.
TI-2023-20229 CVE-2023-38989 · GHSA-4p6x-3w62-jjh4
An issue in the delete function in the UserController class of jeesite v1.2.6 allows…
Priority MEDIUM 53
An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.
TI-2023-20228 CVE-2023-38988 · GHSA-g7hq-ggfv-vxm2
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows…
Priority MEDIUM 53
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
TI-2023-17334 CVE-2023-34601 · GHSA-v4f6-wfcp-gf76
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via…
Priority HIGH 82
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
TI-2020-13566 CVE-2020-19229 · GHSA-v28f-cf4w-7rcj
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.
Priority MEDIUM 45
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.
TI-2019-16017 CVE-2019-1010201 · GHSA-pg3h-m85q-p24r
SQL injection in thinkgem Jeesite
Priority LOW 31
Jeesite 1.2.7 is affected by: SQL Injection.
TI-2019-16018 CVE-2019-1010202 · GHSA-m9hm-r4rp-m682
XML external entity injection in thinkgem Jeesite
Priority LOW 31
Jeesite 1.2.7 is affected by: XML External Entity (XXE).