Vulnerability · Published Oct 22, 2026 · Assigned by VulnCheck

CVE-2021-48015JeeWMS Path Traversal via showOrDownByurl.do

High 7.5

In plain English

A high-severity path traversal in JeeWMS from erzhongxmu. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.6%top 53.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do with ../ sequences in dbPath, which bypasses AuthInterceptor, to retrieve files like win.ini. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-17.

Affected products (as reported)

Vendor	Product	Versions
erzhongxmu	JeeWMS	194f221776cfcfd838abab7107b1a8352ea2bc59 – before 0a610e8178a0a1197e9c6615b58faf67c406d2bc

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Writeup (mirror of WeChat post) technical-description, exploit
GitHub PoC exploit
Fix Commit patch
Nuclei Template technical-description
VulnCheck Advisory: JeeWMS Path Traversal via showOrDownByurl.do third-party-advisory