Skip to content

CVE record · 1 source

CVE-2026-108677

CVSS 6.5

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users…

CVSS: 6.5

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

3

CVE NVD 21d ago

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users…

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC…

CVSS 6.5 CVE-2026-108677