CVE-2025-5387

A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

• CWE-266
• CWE-284

• https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNVIssue Tracking
• https://vuldb.com/?ctiid.310680Permissions Required, VDB Entry
• https://vuldb.com/?id.310680Third Party Advisory, VDB Entry

Published

May 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53862A flaw was found in Ansible. Three API endpoints are accessi…3.5
• CVE-2025-53864Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x…5.8
• CVE-2025-53865In Roundup before 2.5.0, XSS can occur via interaction betwe…6.4
• CVE-2025-53867Island Lake WebBatch before 2025C allows Remote Code Executi…9.8
• CVE-2025-53868When running in Appliance mode, a highly privileged authenti…8.7
• CVE-2025-53869Multiple MFPs provided by Brother Industries, Ltd. does not …6.3
• CVE-2025-53870An improper neutralization of special elements used in an os…6.7
• CVE-2025-53871Rejected reason: Not used
• CVE-2025-53872Rejected reason: Not used
• CVE-2025-53873Rejected reason: Not used
• CVE-2025-53874Rejected reason: Not used
• CVE-2025-53875Rejected reason: Not used