CVE-2023-4450

Summary

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.

Affected Software

VendorProductVersion RangeStatus
jeecgbootJimuReport1.0affected
jeecgbootJimuReport1.1affected
jeecgbootJimuReport1.2affected
jeecgbootJimuReport1.3affected
jeecgbootJimuReport1.4affected
jeecgbootJimuReport1.5affected
jeecgbootJimuReport1.6affected

Weaknesses

  • CWE-74: CWE-74 Injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References