CVE-2023-38989 | BDVDB-2026-208378 Detail

Description#

An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/thinkgem/jeesite/issues/518

Exploit#

No public exploit known

History#

Version 12023-07-31Record published in the CVE List.
Version 22024-10-22Most recent update recorded in the CVE List.