jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from the presence of an SSTI injection vulnerability. An attacker can exploit this vulnerability to execute arbitra...

PT-2023-27983 · Jeecg · Jeecg

Name of the Vulnerable Software and Affected Versions: Jeecg versions up to 3.5.3 Description: The issue is an arbitrary file read vulnerability. It can be exploited via the interface "/testConnection". Recommendations: For versions up to 3.5.3, as a temporary workaround, consider restricting...