UEditor getRemoteImage.jsp in erzhongxmu JEEWMS 3.7 allows remote code execution

Summary

A security flaw in erzhongxmu JEEWMS 3.7's UEditor component could allow attackers to execute malicious code on your server. This could happen if a hacker manipulates a file upload, potentially allowing them to take control of your server. We recommend updating this component or taking other security measures to protect your system.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
jeewms	jeewms	<= 3.7	–

Original title

A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.jsp of the component UEditor. The manip...

Original description

A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the file /plug-in/ueditor/jsp/getRemoteImage.jsp of the component UEditor. The manipulation of the argument upfile leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-918 Server-Side Request Forgery (SSRF)

https://vuldb.com/?ctiid.347382 Permissions Required
https://vuldb.com/?id.347382 Third Party Advisory
https://vuldb.com/?submit.756522 Third Party Advisory
https://www.notion.so/JEEWMS-SSRF-Vulnerability-in-UEditor-Module-304ea92a3c4180... Exploit Third Party Advisory