CVE record · 1 source
CVE-2026-108664
CVSS 4.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged…
- CVSS
- 4.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged…
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged authenticated users to read any AI prompt template. Attackers can enumerate ids via…