Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 15:56:29 +0000 CVE-2026-108673 — JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls https://vulnerability.circl.lu/vuln/cve-2026-108673 <p><strong>Affected:</strong> JeecgBoot</p> <p>JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated user to export all AI prompts. Low-privileged attackers can request /airag/prompts/exportXls to download every user&#39;s prompts, including prompt content, model ids, and parameters, as an Excel workbook.</p> <p><strong>Affected:</strong> JeecgBoot</p> <p>JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated user to export all AI prompts. Low-privileged attackers can request /airag/prompts/exportXls to download every user&#39;s prompts, including prompt content, model ids, and parameters, as an Excel workbook.</p> https://vulnerability.circl.lu/vuln/cve-2026-108673