CyberRota Analysis
AI-GeneratedThe storage endpoint in cjbi admin3 v3.0.0 lacks proper permission checks, allowing any authenticated user to upload arbitrary files and enabling anonymous attackers to download these files. This vulnerability poses a significant risk of unauthorized data exposure and potential exploitation of uploaded content. Organizations using this version of cjbi admin3 should prioritize remediation to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.