CVE-2025-10771

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-10771

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10771.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-10771

Published

2025-09-21T23:15:35.150Z

Modified

2026-04-10T05:20:31.045323Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown function of the file /drag/onlDragDataSource/testConnection of the component DB2 JDBC Handler. Executing manipulation of the argument clientRerouteServerListJNDIName can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

References

Affected packages

Git / github.com/jeecgboot/jimureport

Affected ranges

Type

GIT

Repo

https://github.com/jeecgboot/jimureport

Events

Introduced

Last affected

14617d38e3c261c00fd1da54ca8d8552aa427232

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.2"
        }
    ]
}

Affected versions

v1.*

v1.5.6

v1.5.9

v1.6.0

v1.6.1

v1.6.2

v1.6.2-GA5

v1.6.4

v1.6.5

v1.6.6

v1.7.0

v1.7.2

v1.7.4

v1.7.52

v1.7.8

v1.8.0

v1.8.1

v1.9.1

v1.9.3

v2.*

v2.0.0

v2.1.0

v2.1.1

v2.1.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10771.json"