Description (CNA)
A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely. The vendor response to the GitHub issue report is: "Modified, next version updated".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jeecgboot / JimuReport | affected 2.1.0; affected 2.1.1 |
CWE
CWE-502, CWE-20
References
- https://vuldb.com/?id.319958
- https://vuldb.com/?ctiid.319958
- https://vuldb.com/?submit.628028
- https://github.com/jeecgboot/jimureport/issues/4010
- https://github.com/jeecgboot/jimureport/issues/4010#issuecomment-3182053855
ADP enrichment
No English description supplied.
No references supplied.