~ / search / GHSA-rwhw-6c6r-2823

GHSA-rwhw-6c6r-2823

Insecure Permissions issue in jeecg-boot

Source: GitHub Advisory Database (reviewed) High CVE-2021-37304

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-base <= 2.4.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

References

External links from the advisory. They lead to third-party sites.