CVE-2025-10770 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the compon…
Medium CVSS: 5.3

CVE-2025-10770

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Vendor
Jeecg
Product
Jimureport
CWE
CWE-20
Yayın Tarihi
2025-09-21 23:15:34
Güncelleme
2025-10-08 19:52:02
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-20 Jimureport MEDIUM Jeecg 2025

Referanslar

https://github.com/jeecgboot/jimureport/issues/4116 https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887 https://vuldb.com/?ctiid.325126 https://vuldb.com/?id.325126 https://vuldb.com/?submit.649755