CVE-2023-49442

概要

参考情報

• lemono.fun/thoughts/JEECG-RCE.html · Broken Link

jeecg のその他の脆弱性

• CVE-2023-24789高 8.8jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.
• CVE-2021-37306高 7.5An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive informa…
• CVE-2021-37305高 7.5An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive informa…
• CVE-2021-37304高 7.5An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive inf…
• CVE-2020-20948高 7.5An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variab…