CVE-2023-49442

2024-01-0300:00:00

mitre

www.cve.org

cve-2023-49442

deserialization

untrusted data

jeecgformdemocontroller

jeecg 4.0

arbitrary code

crafted post request

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.

References

lemono.fun/thoughts/JEECG-RCE.html