CVE-2025-5385

A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

• CWE-22

• https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNVIssue Tracking
• https://vuldb.com/?ctiid.310678Permissions Required, VDB Entry
• https://vuldb.com/?id.310678Third Party Advisory, VDB Entry

Published

May 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53843A stack-based buffer overflow vulnerability in Fortinet Fort…7.5
• CVE-2025-53844A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.…8.8
• CVE-2025-53845An improper authentication vulnerability [CWE-287] in Fortin…6.5
• CVE-2025-53847A missing authentication for critical function vulnerability…8.8
• CVE-2025-53848Rejected reason: Not used
• CVE-2025-53849Rejected reason: Not used
• CVE-2025-53850Rejected reason: Not used
• CVE-2025-53851Rejected reason: Not used
• CVE-2025-53852Rejected reason: Not used
• CVE-2025-53853A heap-based buffer overflow vulnerability exists in the ISH…9.8
• CVE-2025-53854A reflected cross-site scripting (xss) vulnerability exists …5.4
• CVE-2025-53855An out-of-bounds write vulnerability exists in the XML parse…7.8