Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 5:13 a.m.•17 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS8.2AI score0.02679EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2024/01/16 8:46 a.m.•378 views

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Co...

10CVSS8.8AI score0.99984EPSS
SaveExploits34
Metasploit
Metasploit
•added 2024/01/16 12:00 a.m.•633 views

Atlassian Confluence SSTI Injection

This module exploits an SSTI injection in Atlassian Confluence servers. A specially crafted HTTP request uses the injection to evaluate an OGNL expression resulting in OS command execution. Versions 8.5.0 through 8.5.3 and 8.0 to 8.4 are known to be vulnerable. Module Options msf use...

10CVSS8.4AI score0.99984EPSS
SaveExploits34
Veracode
Veracode
•added 2024/01/02 8:42 a.m.•38 views

Remote Code Execution

jeecg-boot is vulnerable to SSTI Injection. The vulnerability is caused due to improper request verification within the jmreport/loadTableData component. This could allows remote attackers to execute arbitrary code via crafted HTTP requests...

9.8CVSS8.2AI score0.02679EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2023/12/30 4:15 a.m.•9 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS7.8AI score0.02679EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/30 4:15 a.m.•25 views

Sql injection

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

7.5CVSS8.4AI score0.02679EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/30 12:00 a.m.•1 views

CVE-2023-41544: Improper Control of Generation of Code

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS8.7AI score0.02679EPSS
SaveExploits1References2
OSV
OSV
•added 2023/12/30 12:00 a.m.•29 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8AI score
SaveExploits0References3
Rows per page
Query Builder