Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
jeesite 安全漏洞
Vulnerability Description
卓源软件 Jeesite是中国卓源软件公司的一套开源的Java EE企业级快速开发平台。该平台包括系统权限组件、数据权限组件、数据字典组件、核心工具组件、视图操作组件、工作流组件和代码生成组件等。 jeesite 1.2.6版本存在安全漏洞,该漏洞源于UserController类的delete函数允许攻击者任意删除管理员的角色信息。
CVSS Information
N/A
Vulnerability Type
N/A