CVE-2025-8963
jeecgboot JimuReport Data Large Screen Template testConnection deserialization
Résumé
jeecgboot JimuReport Data Large Screen Template testConnection deserialization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely. The vendor response to the GitHub issue report is: "Modified, next version updated".
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report github.com
- report vuldb.com