Lucene search

PRIOn knowledge basePRION:CVE-2023-38989

HistoryJul 31, 2023 - 6:15 p.m.

Information disclosure

2023-07-3118:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

security issue

authenticated attack

jeesite v1.2.6

usercontroller class

delete function

administrator's role

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

JSON

An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator’s role information.

CPENameOperatorVersion
jeesiteeq1.2.6

CPE	Name	Operator	Version
	jeesite	eq	1.2.6

References

github.com/thinkgem/jeesite/issues/518