jeecg-boot-base CVEs · High

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 3 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5

3matches 0in Waratek scope0.0% 0protected0.0% 1exploited33.3% 0CISA KEV0.0% 2public PoC66.7% 0EPSS ≥ 0.50.0%

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 3 100.0% Not applicable 0 0.0% Withdrawn CVE 0 0.0%

Critical 0 0.0% High 3 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 3 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 33.3% Working exploit published 1 33.3% Proof of concept only 1 33.3% Forecast only 0 0.0% No public exploit 0 0.0%

split by StatusSeverityProtectionExploit maturity peak 3 / month

Feb 233 Outside Waratek scope3 High3 not blocked3 Exploited1 Working exploit published1 Proof of concept only1

Feb 23

3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2021-37306	High	2023-02-03	Outside Waratek scope	Proof of concept only	An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.
CVE-2021-37305	High	2023-02-03	Outside Waratek scope	Exploited	An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.
CVE-2021-37304	High	2023-02-03	Outside Waratek scope	Working exploit published	An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2021-37306

High

2023-02-03

Outside Waratek scope

Proof of concept only

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.

CVE-2021-37305

High

2023-02-03

Outside Waratek scope

Exploited

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.

CVE-2021-37304

High

2023-02-03

Outside Waratek scope

Working exploit published

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.