CVE-2025-14909

Katalog CVE

CVSS 8.1 · High EPSS 0,51%

Kerentanan Manage User Sessions pada jeecg boot. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysUserOnlineController.java. Executing manipulation can lead to manage user sessions. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. This patch is called b686f9fbd1917edffe5922c6362c817a9361cfbd. Applying a patch is advised to resolve this issue.

Rincian

Terbit di NVD

19 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1018: Manage User Sessions

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jeecgboot/JeecgBoot/commit/b686f9fbd1917edffe5922c6362c817a9361cfbd patch
• https://github.com/jeecgboot/JeecgBoot/issues/9195 exploit · issue tracking · advisory pihak ketiga
• https://github.com/jeecgboot/JeecgBoot/issues/9195#issue-3719368751 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.337433 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.715743 exploit · advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.337433 permissions required · vdb entry