An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/thinkgem/jeesite/issues/517 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-28T00:00:00
Updated: 2024-08-02T17:54:39.658Z
Reserved: 2023-07-25T00:00:00
Link: CVE-2023-38988
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-28T21:15:14.213
Modified: 2023-08-03T18:54:14.513
Link: CVE-2023-38988
Redhat
No data.