CVE-2024-10435 didi Super-Jacoco triggerEnvCov command injection

A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...

DiDi Super-Jacoco 命令注入漏洞

DiDi Super-Jacoco is a one-stop JAVA code full/diff coverage collection platform from China's DiDi DiDi company. A command injection vulnerability exists in DiDi Super-Jacoco version 1.0, which stems from the parameter uuid in the file /cov/triggerEnvCov that can lead to command injection...