Description
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/2793
Related Vulnerabilities
CVE-2020-12265 Vulnerability in maven package org.webjars:decompress-tar
CVE-2023-25762 Vulnerability in maven package org.jenkins-ci.plugins:pipeline-build-step
CVE-2022-33891 Vulnerability in maven package org.apache.spark:spark-core_2.12
CVE-2021-36374 Vulnerability in maven package org.apache.ant:ant
CVE-2020-28481 Vulnerability in maven package org.webjars.npm:socket.io