Approved changes feed: RSS · Atom
cpe:2.3:a:jeequan:jeepay:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jeequan (7c597860-b522-5b08-9123-c22cf098af96) |
|---|---|
| Product | Jeepay (915e67b2-0bbb-5e6f-a97c-ee4e6a967cbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111608 |
vulnerable | 2026-11-03 10:16:10.632565 |
Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}
MEDIUM (4.2)
Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENT_DIVISION_RECEIVER_DELETE who own a receiver group whose id matches a victim's receiver id can delete the victim's profit-sharing receiver.
Published: 2026-10-16T17:38:49.058Z
Updated: 2026-10-23T18:44:58.148Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18631 |
vulnerable | 2026-09-16 04:34:01.725363 |
jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization
MEDIUM (6.3)
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-03T19:15:07.971Z
Updated: 2026-08-04T13:57:10.623Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.