An arbitrary file upload vulnerability in the component /server/executeExec of JEHC-BPM v2.0.1 allows attackers to execute arbitrary code via uploading a crafted file.

Related CVEs

CVE-2025-45854

Key Information

GHSA ID

GHSA-g3c7-95hc-gv66

Published

June 3, 2025 6:30 PM

Last Modified

June 4, 2025 3:30 PM

CVSS Score

9.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: September 12, 2025 6:34 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.