CVE-2025-10770CWE-20CWE-502

jeecgboot JimuReport MySQL JDBC testConnection deserialization

Medium · published September 21, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00440 · 37.3th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-502 · Deserialization of Untrusted Data
Published
2025-09-21T22:32Z
EPSS history
Timeline
  • 21 SEP 22:32Z
    jeecgboot JimuReport MySQL JDBC testConnection deserialization
    cvelistv5