CVE record · 1 source
CVE-2026-108669
CVSS 4.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro…
- Vendor
- Apache Software Foundation
- Product
- Shiro
- CVSS
- 4.3
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro…
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro permission annotations. Low-privileged authenticated attackers can supply…