Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-19000

JeecgBoot Anonymous Chat Attachment send server-side request forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a JeecgBoot

  • 3.9.0affected
  • 3.9.1affected
  • 3.9.2affected

References