CVE-2024-5352

CRITICAL 9.8CVE-2024-5352 · Published 26/05/2024 · updated 17/06/2026

In short

CVE-2024-5352 is a CRITICAL (CVSS 9.8) vulnerability affecting aj-report (anji-plus).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aj-report anji-plus	`≤ 1.4.1`	No fix yet

Description

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been rated as critical. Affected by this issue is the function validationRules of the component com.anjiplus.template.gaea.business.modules.datasetparam.controller.DataSetParamController#verification. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266264.

References

anji-plus/report · Exploit
anji-plus/report · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

More vulnerabilities in aj-report

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

aj-report

anji-plus

≤ 1.4.1

No fix yet

Description

More vulnerabilities in aj-report

See all →