An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/thinkgem/jeesite/issues/518 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-31T00:00:00
Updated: 2024-08-02T17:54:39.723Z
Reserved: 2023-07-25T00:00:00
Link: CVE-2023-38989
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-31T18:15:10.320
Modified: 2023-08-04T03:51:49.137
Link: CVE-2023-38989
Redhat
No data.