CVE-2026-75479

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-75479
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75479.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-75479
Published
2026-08-17T20:36:05Z
Modified
2026-08-20T03:30:28Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
JimuReport Unauthenticated Report Listing and Share Token Disclosure
Details

JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retrieve share tokens. Attackers can use disclosed share tokens to access protected report endpoints and retrieve full report definitions including embedded SQL statements and live query data.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75479.json"
}
References

Affected packages

Git / github.com/jeecgboot/jimureport

Affected ranges

Type
GIT
Repo
https://github.com/jeecgboot/jimureport
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
16895751f4ff4c4b0d3d229102289067a4c4438a
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v1.*
v1.5.6
v1.5.9
v1.6.0
v1.6.1
v1.6.2
v1.6.2-GA5
v1.6.4
v1.6.5
v1.6.6
v1.7.0
v1.7.2
v1.7.4
v1.7.52
v1.7.8
v1.8.0
v1.8.1
v1.9.1
v1.9.3
v2.*
v2.0.0
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1.5
v2.2.0
v2.3.0
v2.3.2
v2.3.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75479.json"