Description
Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.
Critical · 9.8
CVE-2023-49442
EUVD-2023-53406GHSA-rf4q-9m5j-m24r
Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted PO…
Published Jan 3, 2024 · Updated Apr 17, 2025 · Assigned by mitre