Description
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/2794
Related Vulnerabilities
CVE-2016-2510 Vulnerability in maven package org.apache-extras.beanshell:bsh
CVE-2023-49620 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-service
CVE-2016-11024 Vulnerability in maven package org.odata4j:odata4j-core
CVE-2020-5263 Vulnerability in maven package org.webjars.npm:auth0-js
CVE-2020-21125 Vulnerability in maven package com.bstek.ureport:ureport2-console