← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-109184

jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutList

CVE-2026-109183

jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameter

CVE-2026-109188

jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints

CVE-2026-109178

jshERP through 3.6 Missing Authorization via /log Audit Endpoints

CVE-2026-109173

yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint

CVE-2026-109166

lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById

CVE-2026-108886

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername

CVE-2026-108881

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo

CVE-2026-108876

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit

CVE-2026-108871

JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule