CVE-2024-23077

HIGH 7.5CVE-2024-23077 · Published 10/04/2024 · updated 09/07/2026

In short

CVE-2024-23077 is a HIGH (CVSS 7.5) vulnerability affecting jfreechart (jfree).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jfreechart jfree	`= 1.5.4`	No fix yet

Description

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component /chart/plot/CompassPlot.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

References

gist.github.com/LLM4IG/f55de46e65fb5a19b7815adb36fd858b · Third Party Advisory
jfree/jfreechart · Product

More vulnerabilities in jfreechart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free