Lucene search
+L

5 matches found

attackerkb
attackerkb
•added 2023/12/30 4:15 a.m.•10 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS7.8AI score0.02679EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/30 4:15 a.m.•29 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS0.02679EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/12/30 12:00 a.m.•28 views

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from the presence of an SSTI injection vulnerability. An attacker can exploit this vulnerability to execute arbitra...

9.8CVSS7.9AI score0.02679EPSS
SaveExploits1References2
Mend
Mend
•added 2023/12/30 12:00 a.m.•2 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS0.02679EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/30 12:00 a.m.•2 views

CVE-2023-41544: Improper Control of Generation of Code

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS8.7AI score0.02679EPSS
SaveExploits1References2
Rows per page
Query Builder