CVE-2024-40489

CVSS 9.8 CRITICALEPSS 0.5%CWE-94

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://gist.github.com/aqyoung/2fd6329ceb06b731a621356921f0d5f0 https://pan.baidu.com/s/14WOPXhRHoxr4FRKGme59ug?pwd=sktp