CVE-2025-61189

Name of the Vulnerable Software and Affected Versions Jeecgboot versions 3.8.2 and earlier

Description Jeecgboot versions 3.8.2 and earlier are susceptible to a path traversal issue. The /sys/comment/addFile API endpoint allows attackers to upload files with system-whitelisted extensions to the /opt directory, bypassing the intended upload location of /opt/upFiles configured for the web server. The addFile function is involved in this issue.

Recommendations Update Jeecgboot to a version later than 3.8.2.