Skip to content

Instantly share code, notes, and snippets.

@this1slwl

this1slwl/gist:d975073bb5feaafd09d9383e8351fb55

Created July 16, 2026 08:23
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save this1slwl/d975073bb5feaafd09d9383e8351fb55 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save this1slwl/d975073bb5feaafd09d9383e8351fb55 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2026-52204
Raw
gistfile1.txt
[CVE ID]
CVE-2026-52204
[Product]
JeecgBoot - 3.9.2
[Version]
JeecgBoot - 3.9.2
[Problem Type]
SSRF
[Description]
An issue in JeecgBoot 3.9.2 allows an attacker to execute arbitrary code via the /sys/common/uploadImgByHttp` endpoint. Although the vendor claims to have fixed SSRF issues (CVE-2026-2945, CVE-2026-7605), the fix is incomplete and can be bypassed.

Comments are disabled for this gist.