Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
jeecg-boot 安全漏洞
Vulnerability Description
Jeecg-Boot是JeecgBoot社区的一款基于代码生成器的低代码平台。 jeecg-boot 2.4.5版本存在安全漏洞，该漏洞源于权限设置不安全。攻击者利用该漏洞通过uri:/sys/user/checkOnlyUser?username=admin获得升级的权限并查看敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A