Skip to content
Threat Feed
Subscribe

Tag

Jeecgboot

3 briefs RSS
high advisory

Missing Authorization Vulnerability in JeecgBoot SysLogController

JeecgBoot versions 3.9.5 and earlier contain a missing authorization vulnerability in the SysLogController that allows low-privileged authenticated users to delete system audit logs via a specially crafted request.

JeecgBoot web-vulnerability authorization
1t 1c
medium advisory

JeecgBoot Improper Access Control Vulnerability (CVE-2026-9580)

JeecgBoot up to version 3.9.1 is vulnerable to improper access control in the LoginController.selectDepart function, allowing remote attackers to bypass intended restrictions.

JeecgBoot cve access control
1r 1t 1c
high advisory

JeecgBoot AI Chat Module Authentication Bypass Vulnerability

JeecgBoot versions 3.9.0 and 3.9.1 are vulnerable to a remote unauthenticated bypass in the AI Chat Module, specifically affecting the JeecgBizToolsProvider.java file, potentially allowing unauthorized access.

jeecgboot authentication-bypass ai-chat-module
2r 1t 1c