Unauthenticated file write via unrestricted upload argument

Unrestricted file upload in JeecgBoot allows remote attackers to write attacker-chosen files through the /api/ endpoint. The CNA record identifies the file argument as input accepted without adequate restriction, but it does not disclose the responsible handler, validation logic, storage path, or accepted file types. No authentication or user interaction is required, and the published assessment limits the demonstrated consequence to low confidentiality, integrity, and availability effects.