~ / search / GHSA-fqp6-fw9g-xpxp

GHSA-fqp6-fw9g-xpxp

Insecure Permissions issue in jeecg-boot

Source: GitHub Advisory Database (reviewed) High CVE-2021-37306

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-base <= 2.4.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.

References

External links from the advisory. They lead to third-party sites.