VULNERABILITY INTELLIGENCE

CVE-2023-38988

CVSS score4.3 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2023-07-28

Last modified2026-06-17

Description

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.