#severity:medium

共收录 5534 条相关情报。

← 返回所有主题
安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108667

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler...

CVE-2026-108666

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsControl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108665

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108668

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108656

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108659

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController...

CVE-2026-108652

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108658

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController...

CVE-2026-108655

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108664

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId...

CVE-2026-108651

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108647

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108660

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tena

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById...

CVE-2026-108649

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiCon

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController...

CVE-2026-108654

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController...

CVE-2026-108663

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList...

CVE-2026-108653

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108662

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108650

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiC

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108646

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler

历史摘要 · 未重新核验 · GitHub Advisory