CVSS Score of 10 (low)


Published Jun 16, 2023
Updated: Jun 23, 2023
CWE ID 434


CVE-2023-34660 is a vulnerability found in jjeecg-boot V3.5.0, specifically in the /jeecg-boot/jmreport/upload interface. The affected products are tzob62 and r6Wi3P. The vulnerability allows for unauthorized arbitrary file uploads. To remediate this vulnerability, it is recommended to update to the latest version of jjeecg-boot and apply any patches or fixes provided by the vendor. The potential danger of this vulnerability lies in the fact that it has a baseSeverity of MEDIUM, with an integrity impact of HIGH. This means that an attacker could potentially upload malicious files and compromise the integrity of the system, leading to unauthorized access or other malicious activities.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-34660 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options