CVE-2024-40489

9.8 criticalEPSS 0.5%

Critical (9.8) in jeecg jeecg boot. EPSS 0.5% chance of exploitation in the next 30 days.

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-04-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jeecg:jeecg_boot

References

https://gist.github.com/aqyoung/2fd6329ceb06b731a621356921f0d5f0
https://pan.baidu.com/s/14WOPXhRHoxr4FRKGme59ug?pwd=sktp

Check your stack JSON