Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-38988
4.3
MEDIUMCVSS v3
Published
July 28, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
thinkgem/jeesite
GitHub👍Java 低代码, 轻量级, Spring Boot, MyBatis, Flowable, TypeScript, Vue, Antdv, 包括核心模块如：组织机构、角色用户、权限授权、数据权限、内容管理、工作流、Spring Cloud 微服务等。
GitHub👍Java 低代码, 轻量级, Spring Boot, MyBatis, Flowable, TypeScript, Vue, Antdv, 包括核心模块如：组织机构、角色用户、权限授权、数据权限、内容管理、工作流、Spring Cloud 微服务等。= 1.2.6NVD