PT-2023-26717 · Jeesite · Jeesite

Name of the Vulnerable Software and Affected Versions: jeesite version 1.2.6 Description: An issue in the delete function in the OaNotifyController class allows authenticated attackers to arbitrarily delete notifications created by Administrators. Recommendations: For jeesite version 1.2.6,...