VULNERABILITY INTELLIGENCE

CVE-2024-40489

CVSS score9.8 CRITICAL
EPSS probability0.54%
CISA KEVNot currently listed
Published2026-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references