Skip to content
OpenAdvisories

Vendor

anji-plus

9 known vulnerabilities.

Products

AJ-Report 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-120209 Public exploit

    AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token

    AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoad…

    anji-plus AJ-Report
  • Critical 9.8
    CVE-2024-7314 Scanner template EPSS 52%

    anji-plus AJ-Report Authentication Bypass

    anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was obse…

    anji-plus AJ-Report