PT-2026-45348

CVE-2026-10239

Published

2026-06-01

Updated

2026-06-01

Description by

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.3

Description A server-side request forgery (SSRF) issue exists in the WordUtil.addImage() function within the /airag/word/edit file. This flaw allows a remote attacker to execute a manipulation that triggers the server to make unauthorized requests.

Recommendations As a temporary workaround, restrict access to the WordUtil.addImage() function until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Ana10Gy

Vendors

Affected products

Weakness enumeration

CWE-918: Server-Side Request Forgery (SSRF)

Related identifiers