Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39174
HistoryFeb 09, 2023 - 3:03 a.m.

Privilege Escalation

2023-02-0903:03:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
jeecg-boot-base-core
vulnerability
permission checks
api uri
sensitive information

0.002 Low

EPSS

Percentile

53.4%

jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of permission checks in the library, which allows an attacker to gain escalated privileges and view sensitive information such as email, phone and enumerate usernames via API URI: /sys/user/querySysUser?username=admin

0.002 Low

EPSS

Percentile

53.4%

Related for VERACODE:39174