CVE-2025-10977 | JeecgBoot up to 3.8.2 /sys/tenant/deleteBatch ids improper authorization

September 25, 2025 Yanac

A vulnerability marked as critical has been reported in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization.

This vulnerability is uniquely identified as CVE-2025-10977. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More