CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

CVE-2021-37304

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

Design/Logic Flaw

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

jeecg 安全漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot version 2.4.5, which stems from an insecure permission setting. An attacker can exploit the vulnerability to gain escalated privileges and view sensitive...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

CVE-2021-37304

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

PT-2023-12306 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot versions 2.4.5 and earlier Description: The issue allows remote attackers to gain escalated privilege and view sensitive information. This is achieved via the API endpoint "/sys/user/querySysUser" with the username variable set to...

CVE-2021-37306

CVE-2021-37306 affects jeecg-boot up to version 2.4.5 and earlier, where insecure permissions allow remote attackers to gain escalated privileges and view sensitive information via the API endpoint /sys/user/checkOnlyUser?username=admin. The vulnerability is documented with a HIGH impact (CVSS v3...

jeecg 安全漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot version 2.4.5, which stems from an insecure permission setting. An attacker exploits the vulnerability to gain escalated privileges and view sensitive...

PT-2023-12307 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot versions 2.4.5 and earlier Description: The issue allows remote attackers to gain escalated privilege and view sensitive information. This is achieved via the "api uri:/sys/user/checkOnlyUser?username=admin" endpoint, where the...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

jeecg-boot 安全漏洞

Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. A security vulnerability exists in jeecg-boot version 2.4.5, which stems from insecure permission settings. An attacker can exploit the vulnerability to gain escalated privileges and view sensitive information vi...

CVE-2021-37304

CVE-2021-37304 : Insecure permissions in jeecg-boot 2.4.5 allow unauthenticated remote attackers to gain escalated privileges and view sensitive information via the httptrace interface. The root cause is insufficient permission checks, enabling information disclosure and privilege escalation. The...

CVE-2021-37305

CVE-2021-37305 affects jeecg-boot up to version 2.4.5. The issue is an insecure permissions flaw in the API endpoint /sys/user/querySysUser?username=admin, allowing remote attackers to gain escalated privileges and view sensitive information (e.g., email, phone, usernames). Reports from multiple ...

ASB-A-256237041

In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Important: Red Hat Security Advisory: Red Hat Camel for Spring Boot 3.14.5 Patch 1 release and security update

A patch is now available for Camel for Spring Boot 3.14.5. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS bas...

SUSE: Security Advisory (SUSE-SU-2023:0201-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...