CVE-2021-37305

creationtimestamp| type| source ---|---|--- 2023-02-03 20:21:04+00:00| seen| https://t.me/cibsecurity/57484 2023-05-18 00:58:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37305.yaml 2025-11-01 21:02:24+00:00| seen|...

CVE-2021-37305

CVE-2021-37305 affects jeecg-boot up to version 2.4.5. The issue is an insecure permissions flaw in the API endpoint /sys/user/querySysUser?username=admin, allowing remote attackers to gain escalated privileges and view sensitive information (e.g., email, phone, usernames). Reports from multiple ...

CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...