#cwe-862

共收录 3939 条相关情报。

← 返回所有主题

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import category dic...

CVE-2026-108646

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenticated user to edit category dictionary nodes via /sys/cat...

CVE-2026-108645

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that allows any authenticated user to delete category dictiona...

CVE-2026-108644

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete category dictionary entries via DELETE /sys/categ...

CVE-2026-108643

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler that lacks Shiro permission annotations. Low-privileged a...

CVE-2026-108640

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently delete data dictionaries via the deletePhysic handler of...

CVE-2026-108639

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler...

CVE-2026-108638

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/de...

CVE-2026-108637

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments...

CVE-2026-108636

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any authenticated ...

CVE-2026-108635

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete department permission bindings via the DELETE /sy...

CVE-2026-108634

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission bindings via POST /sys/sysD...

CVE-2026-108633

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler that allows any authenticated user to read departme...

CVE-2026-108632

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handler that allows low-privileged authenticated users to dele...

CVE-2026-108631

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handl

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any authenticated user to modify department permission record...

CVE-2026-108630

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify ...

CVE-2026-108629

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissio

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user...

CVE-2026-108628

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepa

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. L...

CVE-2026-108627

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any m...

CVE-2026-108626

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sys/message/...

CVE-2026-108625

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862