Approved changes feed: RSS · Atom
cpe:2.3:a:thinkgem:jeesite:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Thinkgem (87a82663-29f5-5954-b29c-8ae16e550734) |
|---|---|
| Product | Jeesite (26cb128d-b18a-5340-a97c-8386276dadf9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-119048 |
vulnerable | 2026-11-03 10:17:11.724988 |
JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
MEDIUM (4.2)
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.
Published: 2026-10-29T13:08:50.215Z
Updated: 2026-10-29T17:20:03.681Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9796 |
vulnerable | 2026-06-08 07:47:09.844428 |
thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
LOW (3.5)
A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 5.13.0 mitigates this issue. The patch is identified as 63773c97a56bdb3649510e83b66c16db4754965b. Upgrading the affected component is recommended.
Published: 2025-09-01T21:32:08.508Z
Updated: 2025-09-02T15:08:29.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7865 |
vulnerable | 2026-06-08 07:45:18.410062 |
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
LOW (3.5)
A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3585737d21fe490ff6948d913fcbd8d99c41fc08. It is recommended to apply a patch to fix this issue.
Published: 2025-07-20T03:02:06.375Z
Updated: 2025-07-21T18:38:38.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7864 |
vulnerable | 2026-06-08 07:45:18.409654 |
thinkgem JeeSite FileUploadController.java upload unrestricted upload
MEDIUM (6.3)
A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the function Upload of the file src/main/java/com/jeesite/modules/file/web/FileUploadController.java. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 3585737d21fe490ff6948d913fcbd8d99c41fc08. It is recommended to apply a patch to fix this issue.
Published: 2025-07-20T02:44:05.934Z
Updated: 2025-07-21T18:38:44.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7863 |
vulnerable | 2026-06-08 07:45:18.409111 |
thinkgem JeeSite ServletUtils.java redirectUrl
LOW (3.5)
A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/main/java/com/jeesite/common/web/http/ServletUtils.java. The manipulation of the argument url leads to open redirect. The attack may be launched remotely. The name of the patch is 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
Published: 2025-07-20T02:14:06.422Z
Updated: 2025-07-22T14:12:16.255Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7785 |
vulnerable | 2026-06-08 07:45:18.223288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7763 |
vulnerable | 2026-06-08 07:45:18.182857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7759 |
vulnerable | 2026-06-08 07:45:18.178618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5186 |
vulnerable | 2026-06-08 07:35:24.340057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8112 |
vulnerable | 2026-06-08 07:00:22.269310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.