Description
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/2793
Related Vulnerabilities
CVE-2018-16487 Vulnerability in maven package org.webjars.npm:lodash.merge
CVE-2020-13959 Vulnerability in maven package org.apache.velocity.tools:velocity-tools-view
CVE-2021-23348 Vulnerability in npm package portprocesses
CVE-2023-30522 Vulnerability in maven package org.jenkins-ci.plugins:fogbugz