CNNVD-202509-1805 Information

CNNVD ID

CNNVD-202509-1805

CVE-2025-10319

  • CNNVD Published: 2025-09-12

Description (Chinese)

JeecgBoot是中国国炬(Jeecg)公司的一个适用于企业 Web 应用程序的 Java 低代码平台。 JeecgBoot 3.8.2及之前版本存在安全漏洞,该漏洞源于文件/sys/tenant/exportLog授权不当,可能导致远程攻击。

Description (English)

JeecgBoot is a Java low-code platform for the enterprise Web application of Jeecg. JeecgBoot 3.8.2 and earlier versions had a security loophole, which stemmed from improper authorization of document/sys/tenant/exportLog, which could lead to a long-range attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Jehovahs Witnesses

Published

2025-09-12

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.323743 https://vuldb.com/?id.323743 https://vuldb.com/?submit.643839 https://www.cnblogs.com/aibot/p/19063358 https://access.redhat.com/security/cve/cve-2025-10319

Share on: