← Database

CVE-2021-37306

HIGH CVSS: 7.5 Published: 2023-02-03 Modified: 2026-06-17

Description

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.

Affected Platforms

Jeecg Jeecg

Weakness Type

CWE-732, CWE-732

References