← Database

CVE-2025-10770

MEDIUM CVSS: 6.3 Published: 2025-09-21 Modified: 2026-06-17

Description

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected Platforms

Jeecg Jimureport

Weakness Type

CWE-20, CWE-502, CWE-502

References