CVE-2025-10770

Published: Sep 21, 2025Modified: Apr 29, 2026

2.1

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected (1)

Products: Jeecg: Jimureport

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jeecg Jimureport	Up to 2.1.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (5)

https://github.com/jeecgboot/jimureport/issues/4116

Source: cna@vuldb.com

ExploitIssue TrackingThird Party Advisory

https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887

Source: cna@vuldb.com

ExploitIssue TrackingThird Party Advisory

https://vuldb.com/?ctiid.325126

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.325126

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.649755

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

Timeline

No history available yet.