high7.5
CVE-2020-20948
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
Impact
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeecg | Jeecg | Version 3.8 |