CNNVD-202509-3157 Information

CNNVD ID

CNNVD-202509-3157

CVE-2025-10707

  • CNNVD Published: 2025-09-19

Description (Chinese)

JeecgBoot是中国国炬(Jeecg)公司的一个适用于企业 Web 应用程序的 Java 低代码平台。 JeecgBoot 3.8.2及之前版本存在安全漏洞,该漏洞源于文件/message/sysMessageTemplate/sendMsg中存在授权不当,可能导致远程攻击。

Description (English)

JeecgBoot is a Java low-code platform for the enterprise Web application of Jeecg. JeecgBoot 3.8.2 and previous versions have security loopholes, which stem from improper authorization in documents/message/sysmessageTemplate/sendMsg, which may lead to a remote attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Jehovahs Witnesses

Published

2025-09-19

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.324995 https://vuldb.com/?id.324995 https://vuldb.com/?submit.644659 https://www.cnblogs.com/aibot/p/19063346 https://access.redhat.com/security/cve/cve-2025-10707

Share on: