CVE-2025-10770: Jeecg Jimureport

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected products

• Jeecg Jimureport: up to and including 2.1.2

Published 2025-09-21. Last modified 2026-06-17.