What is the CVSS score of EUVD-2025-32694?

EUVD-2025-32694 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Jeecg Boot are affected by EUVD-2025-32694?

CVE-2025-61189 presents moderate security risk rated CVSS 6.3. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available.

Is there a public PoC exploit available for EUVD-2025-32694?

Yes, a public proof-of-concept exploit is available for EUVD-2025-32694. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate EUVD-2025-32694?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jeecg Boot EUVD-2025-32694

| CVE-2025-61189 MEDIUM

Path Traversal: '../filedir' (CWE-24)

2025-10-01 cve@mitre.org

Path Traversal Jeecg Boot

6.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 18:18 euvd

EUVD-2025-32694

Analysis Generated

Mar 13, 2026 - 18:18 vuln.today

PoC Detected

Oct 07, 2025 - 14:42 vuln.today

Public exploit code

CVE Published

Oct 01, 2025 - 20:18 nvd

MEDIUM 6.3

DescriptionCVE.org

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.

Analysis

Technical ContextAI

Path traversal allows an attacker to access files outside the intended directory by manipulating file paths with sequences like '../'.

RemediationAI

Validate and sanitize file path inputs. Use a whitelist of allowed files or directories. Implement chroot jails or containerization.

EUVD-2025-32694 vulnerability details – vuln.today

Back