#cwe-862

共收录 3939 条相关情报。

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /sys/user/changeDep...

CVE-2026-108874

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateD...

CVE-2026-108873

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any authenticated user to edit user departm...

CVE-2026-108872

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleController that lets low-privileged authenticated users modify...

CVE-2026-108871

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated users to modify rol...

CVE-2026-108870

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by calling POST /sys/api/sendS...

CVE-2026-108869

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements via POST /sys/api/sendBusTemp...

CVE-2026-108868

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById handler that allows any authenticated user to read other use...

CVE-2026-108867

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any account's permissions via the queryUserAuths handler. Low-priv...

CVE-2026-108866

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId

CVE-2026-108891

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls

CVE-2026-108888

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls

CVE-2026-108887

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername

CVE-2026-108886

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete

CVE-2026-108885

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint

CVE-2026-108884

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig

CVE-2026-108883

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

CVE-2026-108882

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo

CVE-2026-108881

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId

CVE-2026-108880

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById

CVE-2026-108878

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862