Security Advisory

CVE-2021-37306

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-03 00:00:00
Last updated 2025-03-26 18:30:04
Assigner mitre
State PUBLISHED

Description

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.