PT-2024-13738 · Jeecg · Jeecg

Name of the Vulnerable Software and Affected Versions: JEECG versions 4.0 and earlier Description: The issue allows attackers to run arbitrary code via a crafted POST request due to deserialization of untrusted data in the jeecgFormDemoController. This can be exploited by sending a malicious POST...