A vulnerability was detected in JeecgBoot up to 3.8.2. This impacts an unknown function of the file /sys/tenant/exportXls. Performing manipulation results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.325852 | Permissions Required VDB Entry |
| https://vuldb.com/?id.325852 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.653341 | Third Party Advisory VDB Entry |
| https://www.cnblogs.com/aibot/p/19063356 | Exploit Third Party Advisory |
Configurations
History
31 Dec 2025, 00:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jeecg jeecg Boot
Jeecg |
|
| CPE | cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:* |
29 Sep 2025, 13:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:guojusoft:jeecgboot:*:*:*:*:*:*:*:* | |
| First Time |
Guojusoft
Guojusoft jeecgboot |
|
| References | () https://vuldb.com/?ctiid.325852 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.325852 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.653341 - Third Party Advisory, VDB Entry | |
| References | () https://www.cnblogs.com/aibot/p/19063356 - Exploit, Third Party Advisory |
26 Sep 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-26 00:15
Updated : 2025-12-31 00:59
NVD link : CVE-2025-10981
Mitre link : CVE-2025-10981
CVE.ORG link : CVE-2025-10981
JSON object : View
Products Affected
jeecg
- jeecg_boot