Lucene search

VulDBCVELIST:CVE-2023-1784

HistoryMar 31, 2023 - 8:00 p.m.

CVE-2023-1784 jeecg-boot API Documentation improper authentication

2023-03-3120:00:05

CWE-287

VulDB

www.cve.org

cve-2023-1784

jeecg-boot

api documentation

improper authentication

critical vulnerability

unknown processing

remote attack

vdb-224699

exploit disclosed

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

JSON

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentation. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224699.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "jeecg-boot",
    "versions": [
      {
        "version": "3.5.0",
        "status": "affected"
      }
    ],
    "modules": [
      "API Documentation"
    ]
  }
]

References

note.youdao.com/ynoteshare/index.html?id=7eb8fc804ea3544d8add43749a09173e

vuldb.com/?ctiid.224699

vuldb.com/?id.224699

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

JSON

Related for CVELIST:CVE-2023-1784