What is GHSA-49jp-cghc-p5pj?

GHSA-49jp-cghc-p5pj is a security advisory published by GitHub Security Advisories with Critical severity. JeecgBoot server-side template injection

Which CVE IDs does GHSA-49jp-cghc-p5pj cover?

GHSA-49jp-cghc-p5pj covers the following CVE IDs: CVE-2023-41544. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-49jp-cghc-p5pj?

GHSA-49jp-cghc-p5pj has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-49jp-cghc-p5pj?

GHSA-49jp-cghc-p5pj affects 1 product, including: maven/org.jeecgframework.boot:jeecg-boot-common:\u003c= 3.5.3.

GHSA-49jp-cghc-p5pjCriticalCVSS 9.1

JeecgBoot server-side template injection

Vendor

GitHub Security Advisories

Published

December 30, 2023

Last Modified

January 5, 2024

🔗 CVE IDs covered (1)

CVE-2023-41544 →

📋 Description

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.

🎯 Affected products1

maven/org.jeecgframework.boot:jeecg-boot-common:<= 3.5.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2023-41544
https://pho3n1x-web.github.io/2023/09/18/CVE-2023-41544%28JeecgBoot_SSTI%29/
https://github.com/advisories/GHSA-49jp-cghc-p5pj