Thinkgem vulnerabilities
We track 4 vulnerabilities in Thinkgem products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 2, 2026.
Latest Thinkgem vulnerabilities
- 8.1 High severity
JeeSite: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered
- 8.1 High severity
JeeSite: Improper Restriction of XML External Entity Reference
A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java of the component Endpoint. Executing a manipulation can lead to xml external entity reference. The attack may b
- 8.8 High severity
JeeSite: Server-Side Request Forgery
A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/java/com/jeesite/common/ueditor/ActionEnter.java of the component UEditor Image Grabber. Such manipulation of the argumen
- 8.8 High severity
JeeSite: Server-Side Request Forgery
A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the function ResourceLoader.getResource of the file /cms/fileTemplate/form of the component URI Scheme Handler. The manipulation of the argumen