CVE-2024-40489 in JeecgBoot
요약 (영어)
There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
책임이 있는
MITRE
예약하다
2024. 07. 05.
공개
2026. 04. 01.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354709 | JeecgBoot HTTP 권한 상승 | 74 | 정의되지 않음 | 정의되지 않음 | CVE-2024-40489 |