Skip to content
Sign in
5.1 Medium

CVE-2025-4533 A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0

Description

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product Affected versions Fixed in
JeecgBoot 3.8.0 No fix stated
JeecgBoot 3.7 No fix stated
JeecgBoot 3.6 No fix stated
JeecgBoot 3.5 No fix stated
JeecgBoot 3.4 No fix stated
JeecgBoot 3.3 No fix stated
JeecgBoot 3.2 No fix stated
JeecgBoot 3.1 No fix stated
JeecgBoot 3.0 No fix stated

Other CVEs of JeecgBoot

The 47 CVEs of JeecgBoot →
CVE-2026-86228 A security vulnerability has been detected in JeecgBoot up to 3.9.3 5.3 Medium CVE-2026-19000 A vulnerability was identified in JeecgBoot up to 3.9.2 6.9 Medium CVE-2026-11502 A weakness has been identified in JeecgBoot up to 3.9.2 2.3 Low CVE-2026-11464 A vulnerability was identified in JeecgBoot up to 3.9.2 2.3 Low
Track this CVE