Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39173
HistoryFeb 09, 2023 - 2:51 a.m.

Privilege Escalation

2023-02-0902:51:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
jeecg-boot-base-core
privilege escalation
permission checks
sensitive information
api uri
software

0.004 Low

EPSS

Percentile

74.2%

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of permission checks in the library, which allows an attacker to gain escalated privilege and view sensitive information such as email, phone and enumerate usernames via API URI: /sys/user/querySysUser?username=admin

0.004 Low

EPSS

Percentile

74.2%