Missing Authorization in JeecgBoot Allows Prompt Template Deletion

Executive Summary

JeecgBoot through version 3.9.5 has a missing authorization vulnerability in the AiragPromptsController. Any authenticated user can delete AI prompt templates by sending a DELETE request to /airag/prompts/delete. Attackers can first obtain template IDs from the unprotected GET /airag/prompts/list endpoint and then delete any user's prompt template, making it unavailable to all users.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if unauthenticated or low-privileged users can access the /airag/prompts/list endpoint to list prompt IDs and the /airag/prompts/delete endpoint to delete prompts. Use tools like curl to send GET and DELETE requests to these endpoints. For example, try listing prompts with 'curl -X GET http://<target>/airag/prompts/list' and attempt to delete a prompt with 'curl -X DELETE http://<target>/airag/prompts/delete?id=<prompt_id>'.

Useful 0 Not Useful 0

Impact Analysis

Low-privileged attackers can delete critical AI prompt templates used by other users, disrupting AI services and workflows. This can lead to loss of important data, operational disruptions, and potential misuse of deleted prompts if restored improperly.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data deletion, potentially violating GDPR's integrity principle or HIPAA's access controls. Organizations using JeecgBoot may face compliance risks if prompt templates contain sensitive or regulated data.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update JeecgBoot to a version beyond 3.9.5 where this vulnerability is patched. If an update is not immediately possible, restrict access to the /airag/prompts/delete and /airag/prompts/list endpoints by implementing proper authorization checks or firewall rules. Review all prompt templates for unauthorized deletions and restore any affected templates from backups.

Useful 0 Not Useful 0