← Database

CVE-2026-75339

HIGH CVSS: 8.8 Published: 2026-08-28 Modified: 2026-08-28

Description

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.

Affected Platforms

Unknown

Weakness Type

CWE-862

References