Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:13 a.m.8 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS8.2AI score0.02657EPSS
Exploits1References1
Metasploit
Metasploit
added 2024/01/25 7:50 p.m.572 views

Atlassian Confluence SSTI Injection

This module exploits an SSTI injection in Atlassian Confluence servers. A specially crafted HTTP request uses the injection to evaluate an OGNL expression resulting in OS command execution. Versions 8.5.0 through 8.5.3 and 8.0 to 8.4 are known to be vulnerable. Module Options msf use...

10CVSS8.6AI score0.99984EPSS
Exploits31
GithubExploit
GithubExploit
added 2024/01/16 8:46 a.m.354 views

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Co...

10CVSS10AI score0.99984EPSS
Exploits31
Veracode
Veracode
added 2024/01/02 8:42 a.m.25 views

Remote Code Execution

jeecg-boot is vulnerable to SSTI Injection. The vulnerability is caused due to improper request verification within the jmreport/loadTableData component. This could allows remote attackers to execute arbitrary code via crafted HTTP requests...

9.8CVSS8.2AI score0.02657EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/30 4:15 a.m.1 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS7.8AI score0.02657EPSS
Exploits1References3
OSV
OSV
added 2023/12/30 4:15 a.m.18 views

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

9.8CVSS9.8AI score0.02657EPSS
Exploits1References1
Prion
Prion
added 2023/12/30 4:15 a.m.17 views

Sql injection

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

7.5CVSS8.4AI score0.02657EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder