PT-2026-109886

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can modify message push records due to missing authorization. By calling the endpoint "PUT /sys/message/sysMessage/edit", an attacker can provide any sys sms reco...