6.9
Moyenne
CVE-2026-93961 A security flaw has been discovered in Dromara UJCMS up to 12.3.1
Description
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in improper authorization. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UJCMS 12.3 | 12.3.0 → 12.3.1 | Pas de correctif indiqué |
Autres CVE de UJCMS
Les 7 CVE de UJCMS →
CVE-2026-78140
A flaw has been found in Dromara UJCMS up to 10.1.3
5.1
Moyenne
CVE-2026-2954
A vulnerability was found in Dromara UJCMS 10.0.2
5.3
Moyenne
CVE-2026-2953
A vulnerability has been found in Dromara UJCMS 101.2
5.3
Moyenne
CVE-2025-2491
A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5
4.8
Moyenne