8 matches found
EUVD-2026-96611
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
CVE-2026-108672
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
CVE-2026-108672 JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
CVE-2026-108672 JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
CVE-2026-108672
JeecgBoot versions through 3.9.5 are susceptible to an authorization bypass vulnerability within the getVideoRecords handler of the VideoGenerationController. This flaw allows authenticated users to access the records of other users by manipulating the userId parameter. Specifically, low-privileg...
CVE-2026-108672 JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
CVE-2026-108672: Authorization Bypass Through User-Controlled Key
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...
PT-2026-109933
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...