GCVE - cpe:2.3:a:aitangbao:springboot-manager:1.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aitangbao:springboot-manager:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

Vendor	Aitangbao (`d33fcc33-1d1c-537d-a8e7-28d6a2ef8628`)
Product	Springboot Manager (`cfc532b4-6632-5a57-a505-76b16808019b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitee/zwens/springboot-manager`	purl2cpe	2026-06-01 10:13:18.771583
`pkg:github/aitangbao/springboot-manager`	purl2cpe	2026-06-01 10:13:18.771586

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-24062`	vulnerable	2026-06-08 06:29:41.096504	Details available springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role. Published: 2024-02-01T00:00:00.000Z Updated: 2025-06-12T14:57:42.992Z Open on db.gcve.eu Reference links https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#12-stored-cross-site-scripting-sysrole	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24061`	vulnerable	2026-06-08 06:29:41.095930	Details available springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add. Published: 2024-02-01T00:00:00.000Z Updated: 2025-05-29T15:02:49.429Z Open on db.gcve.eu Reference links https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#13-stored-cross-site-scripting-syscontentadd	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24060`	vulnerable	2026-06-08 06:29:41.095519	Details available springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user. Published: 2024-02-01T00:00:00.000Z Updated: 2025-06-12T14:43:09.037Z Open on db.gcve.eu Reference links https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#11-stored-cross-site-scripting-sysuser	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24059`	vulnerable	2026-06-08 06:29:41.094951	Details available springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files. Published: 2024-02-01T00:00:00.000Z Updated: 2025-05-15T16:01:21.402Z Open on db.gcve.eu Reference links https://github.com/By-Yexing/Vulnerability_JAVA/blob/main/2024/springboot-manager.md#2-file-upload-vulnerability	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.