Advisories · Technology
JeecgBoot.
Every CVE that names JeecgBoot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint
- JeecgBoot
- Broken access control
- CVSS 8.6 High
JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot AiragModelController.java exportXls access control
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
JeecgBoot Anonymous Chat Attachment send server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 8.6 High
JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
- JeecgBoot
- Broken access control
- CVSS 2.3 Low
JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect
- JeecgBoot
- Open redirect
- CVSS 2.3 Low
JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure
- JeecgBoot
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
JeecgBoot test server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot edit WordUtil.addImage server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot AiragModelController access control
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot add access control
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
JeecgBoot selectDepart LoginController.selectDepart access control
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot SysUser userEdit user.getUsername access control
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 6.3 Medium
JeecgBoot OpenAPI Endpoint call improper authentication
- JeecgBoot
- Authentication bypass
- CVSS 6.3 Medium
JeecgBoot mLogin Endpoint LoginController.java authorization
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot SVG File CommonController.java cross site scripting
- JeecgBoot
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
JeecgBoot JSON Object loadTreeData sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 5.3 Medium
JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot FillRuleUtil edit improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control