Description
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/2793
Related Vulnerabilities
CVE-2016-0706 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2019-10358 Vulnerability in maven package org.jenkins-ci.main:maven-plugin
CVE-2021-41167 Vulnerability in npm package modern-async
CVE-2020-36048 Vulnerability in maven package org.webjars.bower:engine.io
CVE-2016-6805 Vulnerability in maven package org.apache.ignite:ignite-core