Information disclosure

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators...

CVE-2023-38988

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators...

CVE-2023-38988

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators...

CVE-2023-38988

CVE-2023-38988 – jeesite 1.2.6 exposes a flaw in the delete function of the OaNotifyController that allows authenticated attackers to arbitrarily delete administrator-created notifications. The issue is documented across multiple sources (NVD/Red Hat/RH and others) with a reported CVSS v3.1 base ...