CVE-2024-10919

CVE-2024-10919 affects didi Super-Jacoco 1.0. The vulnerability lies in the /cov/triggerUnitCover function, where manipulating the uuid parameter leads to an OS command injection. The attack can be launched remotely, and the public exploit is available. Connected sources confirm the issue and des...

CVE-2024-10435 didi Super-Jacoco triggerEnvCov command injection

A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2024-10435

CVE-2024-10435 affects didi Super-Jacoco 1.0. The vulnerability resides in the /cov/triggerEnvCov code path, where manipulation of the uuid argument enables command injection. It is exploitable over the network and exploitation has been disclosed publicly. Multiple sources (NVD, CVE List, Red Hat...