Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Rusty19

#53045of 53,608
3.1Total CVSS
Vulnerabilities · 1
PT-2026-47195
3.1
2026-06-07
Unknown · Jeecg-Boot · CVE-2026-11464
**Name of the Vulnerable Software and Affected Versions** JeecgBoot versions prior to 3.9.3 **Description** An information disclosure issue exists in the User List Endpoint. The manipulation of the `salt` argument within the `queryPageList()` function of the `srcmainjavaorgjeecgmodulessystemcontrollerSysUserController.java` file allows for remote attacks. This issue is characterized by high complexity and difficult exploitation. **Recommendations** Update to a version newer than 3.9.2. As a temporary workaround, restrict access to the `queryPageList()` function to minimize the risk of exploitation.