Insecure Permissions issue in jeecg-boot

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-37306 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• jeecgboot/jeecg-boot · PACKAGE

Lỗ hổng khác của org.jeecgframework.boot:jeecg-boot-base

• CVE-2021-37305CAO 7.5An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive informa…
• CVE-2021-37304CAO 7.5An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive inf…
• CVE-2021-44585TRUNG BÌNH 6.1A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
• CVE-2022-22881NGHIÊM TRỌNG 9.8Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
• CVE-2022-22880NGHIÊM TRỌNG 9.8Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.