← Database

CVE-2024-40489

CRITICAL CVSS: 9.8 Published: 2026-04-01 Modified: 2026-06-17

Description

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

Affected Platforms

Jeecg Jeecg Boot

Weakness Type

CWE-94

References