Description
JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| TmaxSoft | JEUS | JEUS 7 Fix#0~5, JEUS 8Fix#0~1 |
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197Patch, Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197Patch, Third Party Advisory
Timeline
- Published
- Nov 8, 2019
- Last modified
- Jun 17, 2026
- NVD status
- Modified