CVE-2025-10977

Name of the Vulnerable Software and Affected Versions JeecgBoot versions up to 3.8.2

Description A flaw exists in JeecgBoot that allows for improper authorization. This is due to the manipulation of the ids argument within an unknown function of the /sys/tenant/deleteBatch file. The attack can be carried out remotely, but requires a high level of complexity and is considered difficult to exploit. The exploit is publicly available. The vendor was contacted but did not respond.

Recommendations Update JeecgBoot to a version newer than 3.8.2.