#cwe-862

共收录 3939 条相关情报。

← 返回所有主题
安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108887

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...

CVE-2026-108891

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController...

CVE-2026-108878

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...

CVE-2026-108886

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108885

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108882

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController...

CVE-2026-108877

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108884

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig...

CVE-2026-108883

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo...

CVE-2026-108881

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict...

CVE-2026-108880

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule...

CVE-2026-108871

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108868

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108874

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers...

CVE-2026-108872

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit...

CVE-2026-108876

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController...

CVE-2026-108870

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108873

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108869

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...

CVE-2026-108875

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler

历史摘要 · 未重新核验 · GitHub Advisory