Skip to content
OpenAdvisories
Unscored CVE-2023-38989 EUVD-2023-42747GHSA-4p6x-3w62-jjh4

An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Admi…

Published Jul 31, 2023 · Updated Oct 22, 2024 · Assigned by mitre

Description

An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.

References