JFinalCMS CVE-2023-41599 目录遍历漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-41599
• https://cn-sec.com/archives/2055400.html
• https://stack.chaitin.com/vuldb/detail/e66d04c7-94b5-4cec-b252-9a8506cfa5c9
• https://stack.chaitin.com/poc/detail/3266
• https://github.com/advisories/GHSA-g57g-8xw6-gwrx
• https://pentest-tools.com/vulnerabilities-exploits/jfinalcms-v500-directory-traversal_22913
• https://cvefeed.io/vuln/detail/CVE-2023-41599
• https://access.redhat.com/security/cve/cve-2023-41599

Related Vulnerabilities

• PoCCVE-2023-41599: JFinalCMS v5.0.0 - Directory Traversal
• （CVE-2025-3214）JFinal CMS 5.2.4及之前版本路径遍历漏洞
• Jfinal CMS 模板注入漏洞
• JFinalOA任意文件上传漏洞
• Jfinal CMS SQL注入漏洞(CVE-2022-33114)