CVE-2024-8706 | JFinalCMS up to 20240903 com.cms.util.TemplateUtils /admin/template/update fileName path traversal (IAOSJG)

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The manipulation of the argument fileName leads to path traversal.

This vulnerability is uniquely identified as CVE-2024-8706. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.