CVE-2021-37306 Information

Description

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.

Reference

https://github.com/jeecgboot/jeecg-boot/issues/2794