~ / search / GHSA-4f48-qpch-4ppx

GHSA-4f48-qpch-4ppx

Insecure Permissions issue in jeecg-boot

Source: GitHub Advisory Database (reviewed) High CVE-2021-37305

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-base <= 2.4.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.

References

External links from the advisory. They lead to third-party sites.