CVE-2025-10770

2.1 lowEPSS 0.4%

Low (2.1) in jeecg jimureport. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWEs: CWE-502, CWE-20
Published: 2025-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jeecg:jimureport

References

https://github.com/jeecgboot/jimureport/issues/4116
https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887
https://vuldb.com/?ctiid.325126
https://vuldb.com/?id.325126
https://vuldb.com/?submit.649755

Check your stack JSON