CVE-2024-43028

脆弱性の種類

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

影響を受ける製品

• jeecg jeecg_boot

参考情報

• https://gist.github.com/aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b
• https://pan.baidu.com/s/1h2RGEvxuvsKtsn2-TlFlmA?pwd=gf5r