Information disclosure

2023-08-0400:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

authenticated attackers

actmodelcontroller

models

administrator

jeesite v1.2.6

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.

CPENameOperatorVersion
jeesiteeq1.2.6

CPE	Name	Operator	Version
	jeesite	eq	1.2.6

References

github.com/thinkgem/jeesite/issues/520