Description
A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jeecgboot | JimuReport | 2.1.0, 2.1.1, 2.1.2 | — |
References
- VDB-325126 | jeecgboot JimuReport MySQL JDBC testConnection deserialization vdb-entry
- VDB-325126 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #649755 | jeecgboot jimureport ≤ v2.1.2 Deserialization third-party-advisory
- https://github.com/jeecgboot/jimureport/issues/4116 issue-tracking
- https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887 exploit issue-tracking