CVE-2024-8694 | JFinalCMS up to 20240903 com.cms.controller.admin.TemplateController /admin/template/update fileName path traversal (IAOKSQ)

A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.admin.TemplateController. The manipulation of the argument fileName leads to path traversal.

This vulnerability is uniquely identified as CVE-2024-8694. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.