Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tsuki124

#43869of 53,630
6.1Total CVSS
Vulnerabilities · 1
PT-2022-12176
6.1
2022-03-10
Unknown · Jeecg-Boot · CVE-2021-44585
**Name of the Vulnerable Software and Affected Versions** jeecg-boot version 3.0 **Description** A Cross Site Scripting (XSS) issue exists in jeecg-boot, specifically in the /jeecg-boot/jmreport/view endpoint with a mouseover event. This issue is related to jeecg-boot being a code generator. **Recommendations** For jeecg-boot version 3.0, consider disabling access to the /jeecg-boot/jmreport/view endpoint until a patch is available to prevent potential exploitation of the XSS issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.