Lucene search
CVE-2021-37305
Insecure Permissions issue in jeecg-boot 2.4.5 allows remote attackers to gain escalated privileg
Show more
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Jeecg Boot <= 2.4.5 - Sensitive Information Disclosure | 17 May 202319:28 | – | nuclei |
 | CVE-2021-37305 | 3 Feb 202300:00 | – | vulnrichment |
 | Code injection | 3 Feb 202318:15 | – | prion |
 | CVE-2021-37305 | 3 Feb 202318:15 | – | osv |
| Insecure Permissions issue in jeecg-boot | 3 Feb 202318:30 | – | osv |
 | Privilege Escalation | 9 Feb 202302:51 | – | veracode |
 | Insecure Permissions issue in jeecg-boot | 3 Feb 202318:30 | – | github |
 | CVE-2021-37305 | 3 Feb 202300:00 | – | cvelist |
 | CVE-2021-37305 | 3 Feb 202318:15 | – | nvd |
| Source | Link |
|---|---|
| github | www.github.com/jeecgboot/jeecg-boot/issues/2794 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| username | query param | /sys/user/querySysUser | Insecure Permissions vulnerability allowing privilege escalation and sensitive information exposure. | CWE-732 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo03 Feb 2023 18:15Current
7.5High risk
Vulners AI Score7.5
CVSS37.5
EPSS0.34027
SSVC