CVE-2025-5390: Medium Access Control Flaw in JeeWMS
JeeWMS has an access control flaw in the filedeal File Handler and no versioned fix, as there are no releases. Restrict the path and check your build date.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
JeeWMS has an access control flaw in the filedeal File Handler and no versioned fix, as there are no releases. Restrict the path and check your build date.
JeeWMS has an access control flaw in dogenerateOne2Many and no versioned fix, as it uses rolling releases. Restrict the path and check your build date.
RIOT-OS up to 2025.04 relies on an assert for a size check in l2filter_add, so release builds can overflow a buffer. Apply the upstream fix and rebuild.
JeeWMS has a SQL injection in the dogenerate function and no versioned fix, as it has no version numbers. Restrict access and check your build date.
JeeWMS has an access control flaw in the dogenerate File Handler and no versioned fix. Restrict the path and check your build date against the record.
JeeWMS has a SQL injection in transEditor and no versioned fix, since the product has no version numbers. Restrict access and check your build date.
libbiosig 3.9.0 has a heap overflow when parsing ISHNE ECG annotation files, rated Critical. Check the Talos report for a fix and avoid untrusted files.
JeeWMS path traversal in the cgformTemplate doAdd function has no versioned fix. Restrict access to the path and check your build against the issue.
JeeWMS SQL injection in the cgAutoList datagrid has no fixed release because there are no versions. Restrict access and check your build date.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.