← Database

CVE-2024-43028

CRITICAL CVSS: 9.8 Published: 2026-04-01 Modified: 2026-06-17

Description

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

Affected Platforms

Jeecg Jeecg Boot

Weakness Type

CWE-77

References