CVE-2023-4450

MediumCVSS 6.3

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

11.41%

95th percentile - higher than 95% of all known CVEs

Summary

A critical vulnerability was found in jeecgboot JimuReport up to version 1.6.0, related to an unknown functionality of the Template Handler component. Manipulation of this functionality leads to injection.

Risk Assessment

This vulnerability allows for remote attacks, posing a serious threat to system security.

Recommendation

It is recommended to upgrade to version 1.6.1 to address this vulnerability.

Original NVD description (English source)

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.