JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108618
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
#cwe-862
共收录 3939 条相关情报。
← 返回所有主题JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController...
CVE-2026-108613
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108610
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler th
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108612
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch han
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108611
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController...
CVE-2026-108606
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController...
CVE-2026-108605
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnn...
CVE-2026-108680
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send annou...
CVE-2026-108679
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role co...
CVE-2026-108678
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored...
CVE-2026-108677
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows low-privileged authenticated users to d...
CVE-2026-108676
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authenticated users to chang...
CVE-2026-108675
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that allows low-privileged authenticated users to read OpenAPI ...
CVE-2026-108674
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated user to export all AI prompt...
CVE-2026-108673
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission chec...
CVE-2026-108671
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsController that allows any authenticated user to run AI pro...
CVE-2026-108670
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro permission annotations. Low-pr...
CVE-2026-108669
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin handler that allows any authenticated user to purge AI prom...
CVE-2026-108668
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the rever...
CVE-2026-108667
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to