CVE-2024-43028

弱点类型

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

受影响产品

• jeecg jeecg_boot

参考链接

• https://gist.github.com/aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b
• https://pan.baidu.com/s/1h2RGEvxuvsKtsn2-TlFlmA?pwd=gf5r