CVE-2025-63691

The pig-mesh In Pig privilege management system (version 3.8.2 and below ) is vulnerable to information leakage due to improper permission verification within the Token Management function of the System Management module. Specifically, the token query interface (/api/admin/sys-token/page) can be ...

CVE-2025-63690

pig-mesh Pig versions 3.8.2 and below are vulnerable to remote code execution (RCE) . The flaw exists in the Quartz management function within the system management module, where an attacker can execute arbitrary Java classes with parameterless constructors and methods accepting a String paramete...