Medium severity6.3NVD Advisory· Published Sep 21, 2025· Updated Apr 29, 2026

CVE-2025-10770

Description

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected products

Jeecg/Jimureport
cpe:2.3:a:jeecg:jimureport:*:*:*:*:*:*:*:*
Range: <=2.1.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/jeecgboot/jimureport/issues/4116nvdExploitIssue TrackingThird Party Advisory
github.com/jeecgboot/jimureport/issues/4116nvdExploitIssue TrackingThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000