Description
A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentation. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224699.
Remediation
References
https://note.youdao.com/ynoteshare/index.html?id=7eb8fc804ea3544d8add43749a09173e
https://vuldb.com/?ctiid.224699
https://vuldb.com/?id.224699
Related Vulnerabilities
CVE-2021-21627 Vulnerability in maven package org.jenkins-ci.plugins:libvirt-slave
CVE-2018-17197 Vulnerability in maven package org.apache.tika:tika-core
CVE-2017-18239 Vulnerability in maven package com.jason-goodwin:authentikat-jwt_2.11
CVE-2022-24785 Vulnerability in npm package moment
CVE-2023-1454 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-common