medium6.3
CVE-2026-10239
A vulnerability was determined in JeecgBoot up to 3.9.2.
Impact
A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the file /airag/word/edit. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. A fix is planned for the upcoming release.
Affected products
| Product | Affected versions |
|---|---|
| JeecgBoot | before 3.9.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.