Threats tagged 'ghsa-vvv6-fxhr-fx5v'

JeecgBoot version 3.9.1 contains an authorization bypass vulnerability in the mLogin Endpoint within the LoginController.java file. This flaw allows remote attackers to bypass authorization controls. Exploitation is considered difficult due to high attack complexity. Public exploit code exists, but no vendor response or patch has been provided.