| عنوان | https://qiaoqiaoyun.com/ jeecgboot/jimureport 2.1.1 PostgreSQL JDBC RCE |
|---|
| الوصف | In the data large screen template of the JiMu Report BI large screen workbench, the /drag/onlDragDataSource/testConnection interface can be called by testing the data source configuration when adding a data source in the design. The backend does not impose any restrictions, resulting in an attacker constructing special connection parameters when connecting to the Postgre SQL database, ultimately leading to RCE. |
|---|
| المصدر | ⚠️ https://github.com/jeecgboot/jimureport/issues/4010 |
|---|
| المستخدم | jmx0hxq (UID 63891) |
|---|
| ارسال | 04/08/2025 04:29 AM (9 أشهر منذ) |
|---|
| الاعتدال | 13/08/2025 06:07 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 319958 [jeecgboot JimuReport حتى 2.1.1 Data Large Screen Template testConnection تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|