Advisories · Technology
jeequan jeepay.
Every CVE that names jeequan jeepay among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}
- jeequan jeepay
- Broken access control
- CVSS 7.1 High
Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs
- jeequan jeepay
- Broken access control
- CVSS 5.3 Medium
jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization
- jeequan jeepay
- Broken access control