#cwe-862

共收录 3939 条相关情报。

← 返回所有主题
安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108675

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController...

CVE-2026-108674

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api...

CVE-2026-108677

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles...

CVE-2026-108678

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108680

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement...

CVE-2026-108679

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment...

CVE-2026-108670

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch...

CVE-2026-108669

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108667

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler...

CVE-2026-108666

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsControl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108665

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108668

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api...

CVE-2026-108648

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108656

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108659

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController...

CVE-2026-108652

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108658

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController...

CVE-2026-108655

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108664

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId...

CVE-2026-108651

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr

历史摘要 · 未重新核验 · GitHub Advisory