CVE-2023-41599 - An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal

MEDIUM

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal

Published Sep 19, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 12.36%

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/		ExploitProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-46093		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 19, 2023

Updated Sep 25, 2024

Reserved Aug 30, 2023

Updated Sep 25, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Sep 19, 2023

Updated Sep 25, 2024

Exploited since n/a