PT-2025-38525
CVE-2025-10707
·
Published
2025-09-19
·
Updated
2026-10-19
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
JeecgBoot versions through 3.8.2
Description
A weakness exists in JeecgBoot that may lead to improper authorization. The issue affects an unknown function within the
/message/sysMessageTemplate/sendMsg file. The exploit for this issue has been publicly released. The vendor was contacted but did not respond.Recommendations
Update JeecgBoot to a version later than 3.8.2.
As a temporary workaround, restrict access to the
/message/sysMessageTemplate/sendMsg file.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾