Yanzhou-Felicity

**Name of the Vulnerable Software and Affected Versions** jeesite version 1.2.6 **Description** An issue in the `delete` function in the `ActModelController` class allows authenticated attackers to arbitrarily delete models created by the Administrator. **Recommendations** For jeesite version 1.2.6, consider disabling the `delete` function in the `ActModelController` class until a patch is available to prevent arbitrary model deletion by authenticated attackers.

**Name of the Vulnerable Software and Affected Versions** jeesite version 1.2.6 **Description** An issue in the `delete` function in the `MenuController` class allows authenticated attackers to arbitrarily delete menus created by the Administrator. **Recommendations** For jeesite version 1.2.6, consider disabling the `delete` function in the `MenuController` class until a patch is available to prevent arbitrary deletion of menus. Restrict access to the `MenuController` class to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** jeesite version 1.2.6 **Description** An issue in the `delete` function in the `UserController` class allows authenticated attackers to arbitrarily delete the Administrator's role information. **Recommendations** For jeesite version 1.2.6, consider disabling the `delete` function in the `UserController` class until a patch is available to prevent arbitrary deletion of the Administrator's role information.

**Name of the Vulnerable Software and Affected Versions** jeesite version 1.2.6 **Description** An issue in the delete function in the OaNotifyController class allows authenticated attackers to arbitrarily delete notifications created by Administrators. **Recommendations** For jeesite version 1.2.6, consider disabling the delete function in the OaNotifyController class until a patch is available. Restrict access to the OaNotifyController class to minimize the risk of exploitation. Avoid using the delete function for notifications created by Administrators until the issue is resolved.