JeeSite
Thinkgem · 11 CVEs
thinkgem JeeSite Connection path traversal
Mar 2, 2026
thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference
Mar 2, 2026
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
Sep 1, 2025
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
Jul 20, 2025
thinkgem JeeSite FileUploadController.java upload unrestricted upload
Jul 20, 2025
thinkgem JeeSite ServletUtils.java redirectUrl
Jul 20, 2025
thinkgem JeeSite SsoController.java sso redirect
Jul 18, 2025
thinkgem JeeSite Site Controller SiteController.java select redirect
Jul 17, 2025
thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery
Jul 17, 2025
thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
May 26, 2025
thinkgem JeeSite Cookie login cross site scripting
Aug 23, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-3405 | thinkgem JeeSite Connection path traversal | LOW | 0.91% | Mar 2, 2026 |
| CVE-2026-3404 | thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference | LOW | 0.53% | Mar 2, 2026 |
| CVE-2025-9796 | thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting | MEDIUM | 0.36% | Sep 1, 2025 |
| CVE-2025-7865 | thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting | MEDIUM | 0.32% | Jul 20, 2025 |
| CVE-2025-7864 | thinkgem JeeSite FileUploadController.java upload unrestricted upload | MEDIUM | 0.32% | Jul 20, 2025 |
| CVE-2025-7863 | thinkgem JeeSite ServletUtils.java redirectUrl | MEDIUM | 0.37% | Jul 20, 2025 |
| CVE-2025-7785 | thinkgem JeeSite SsoController.java sso redirect | MEDIUM | 0.42% | Jul 18, 2025 |
| CVE-2025-7763 | thinkgem JeeSite Site Controller SiteController.java select redirect | MEDIUM | 0.43% | Jul 17, 2025 |
| CVE-2025-7759 | thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery | MEDIUM | 0.34% | Jul 17, 2025 |
| CVE-2025-5186 | thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery | MEDIUM | 0.47% | May 26, 2025 |
| CVE-2024-8112 | thinkgem JeeSite Cookie login cross site scripting | MEDIUM | 0.48% | Aug 23, 2024 |
Showing 1 to 11 of 11 CVEs