Lucene search
HistoryAug 02, 2024 - 5:16 p.m.
CVE-2024-7314
anji-plus
aj-report
authentication bypass
http requests
remote attacker
unauthenticated
arbitrary java
victim server
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.1%
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append “;swagger-ui” to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.
Affected configurations
Node
anji-plusreportRange<1.4.1
Related
vulnrichment
vulnrichment
CVE-2024-7314 anji-plus AJ-Report Authentication Bypass
2024-08-02 16:33:54
cvelist
cvelist
CVE-2024-7314 anji-plus AJ-Report Authentication Bypass
2024-08-02 16:33:54
cve
cve
CVE-2024-7314
2024-08-02 17:16:41
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.1%
Related for NVD:CVE-2024-7314