5.1
Medium
CVE-2025-4533 A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0
Description
A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
References
- VDB-308278 | JeecgBoot Document Library Upload zip unzipFile resource consumption vuldb.com
- VDB-308278 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #566192 | guojusoft JeecgBoot v3.8.0 Resource Consumption vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of JeecgBoot
The 47 CVEs of JeecgBoot →
CVE-2026-86228
A security vulnerability has been detected in JeecgBoot up to 3.9.3
5.3
Medium
CVE-2026-19000
A vulnerability was identified in JeecgBoot up to 3.9.2
6.9
Medium
CVE-2026-11502
A weakness has been identified in JeecgBoot up to 3.9.2
2.3
Low
CVE-2026-11464
A vulnerability was identified in JeecgBoot up to 3.9.2
2.3
Low