#severity:medium

共收录 5534 条相关情报。

← 返回所有主题
安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController...

CVE-2026-108645

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108644

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...

CVE-2026-108639

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108638

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in...

CVE-2026-108642

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows auth

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108640

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows...

CVE-2026-108641

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108643

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108637

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart...

CVE-2026-108635

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController...

CVE-2026-108636

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in...

CVE-2026-108630

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108631

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108634

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108632

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById ha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108633

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule...

CVE-2026-108629

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule...

CVE-2026-108627

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...

CVE-2026-108625

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...

CVE-2026-108624

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler t

历史摘要 · 未重新核验 · GitHub Advisory