JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
CVE-2026-108887
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername
CVE-2026-108886
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername
JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
CVE-2026-108885
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint
CVE-2026-108884
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle
JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig
CVE-2026-108883
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any
JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser
CVE-2026-108882
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo
CVE-2026-108881
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any
JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
CVE-2026-108880
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint
JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
CVE-2026-108879
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
CVE-2026-108877
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
CVE-2026-108876
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
CVE-2026-108875
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson
CVE-2026-108874
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
CVE-2026-108873
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
CVE-2026-108872
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule
CVE-2026-108871
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
CVE-2026-108870
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
CVE-2026-108869
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement
CVE-2026-108868
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
CVE-2026-108867
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han