Threats tagged 'ghsa-596j-x8qj-w8qx'

A vulnerability in JeecgBoot up to version 3.9.1 affects the FillRuleUtil component's /sys/fillRule/edit functionality. Improper authorization occurs due to manipulation of the ruleClass argument, allowing remote attackers to exploit this flaw. The vendor has confirmed the issue and plans to release a fix in an upcoming version. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 6.3.