CVE-2025-10319

JeecgBoot Tenant Log Export exportLog improper authorization

CVSS 5.3 MEDIUMEPSS 0.3%CWE-266 CWE-285

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Sep 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A security flaw has been discovered in JeecgBoot up to 3.8.2. Affected by this issue is some unknown functionality of the file /sys/tenant/exportLog of the component Tenant Log Export. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

n/a · JeecgBoot

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://vuldb.com/?ctiid.323743 https://vuldb.com/?id.323743 https://vuldb.com/?submit.643839 https://www.cnblogs.com/aibot/p/19063358