Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-41544

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-49jp-cghc-p5pj

JeecgBoot server-side template injection SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.

gitlab/maven/org.jeecgframework.boot/jeecg-boot-common/CVE-2023-41544

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.