CVE-2025-66913

JimuReport versions through 2.1.3 are vulnerable to remote code execution (RCE) due to the unauthenticated handling of user-controlled H2 JDBC URLs . The application passes the attacker-supplied JDBC URL directly to the H2 driver , which allows the use of specific directives to execute arbitrary ...