Description (CNA)
A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jeecgboot / JimuReport | affected 2.1.0; affected 2.1.1; affected 2.1.2 |
CWE
CWE-502, CWE-20
References
- https://vuldb.com/?id.325126
- https://vuldb.com/?ctiid.325126
- https://vuldb.com/?submit.649755
- https://github.com/jeecgboot/jimureport/issues/4116
- https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887
ADP enrichment
No English description supplied.
No references supplied.