CVE-2023-38991

Summary

CVE-2023-38991 is a vulnerability affecting jeesite v1.2.6. The delete function in the ActModelController class contains a flaw that enables authenticated attackers to delete models created by the Administrator arbitrarily. This issue poses a significant risk, allowing unauthorized deletion of critical data or functionality. Attackers can exploit this vulnerability to manipulate the system at will, potentially leading to serious consequences. System administrators are advised to patch this issue promptly to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.