jeecgboot JimuReport Template injection
75Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 6.3epss 11%
da publicação à arma170 dias
Publicada no NVD21 de ago.
1ª PoC+170d
VulnCheck+351d
probabilidade de exploração
11%top 4% das CVEs
exploração observada
simVulnCheck
1 exploit(s) público(s)
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
jeecgboot · JimuReportPoCs públicas encontradas — 1
vulncheckvulncheck.com/xdb/ee5af2a9df25não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.