Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

GSA_kwCzR0hTQS1yd2h3LTZjNnItMjgyM84AAxZ3

High EPSS: 0.49385% (0.97558 Percentile) EPSS:
Permalink JSON

Insecure Permissions issue in jeecg-boot

Affected Packages Affected Versions Fixed Versions
maven:org.jeecgframework.boot:jeecg-boot-base <= 2.4.5 No known fixed version
0 Dependent packages
0 Dependent repositories

Affected Version Ranges

All affected versions

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

References:

Identifiers

GHSA-rwhw-6c6r-2823

CVE-2021-37304

Risk

Severity

High

EPSS

EPSS Percentage: 0.49385

EPSS Percentile: 0.97558

Classification

General

Source

GitHub Advisory Database

Origin

Unspecified

Repository

https://github.com/jeecgboot/jeecg-boot

Date and time

Published

over 2 years ago

Updated

over 2 years ago

API

JSON