Skip to content

Instantly share code, notes, and snippets.

@aqyoung

aqyoung/gist:2fd6329ceb06b731a621356921f0d5f0 Secret

Last active April 2, 2026 01:41
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save aqyoung/2fd6329ceb06b731a621356921f0d5f0 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save aqyoung/2fd6329ceb06b731a621356921f0d5f0 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2024-40489
Raw
gistfile1.txt
[CVE ID]
CVE-2024-40489
[PRODUCT]
JeecgBoot JimuReport
[Affected Product Code Base]
version >= 3.0.0 - version <= 3.5.3
[PROBLEM TYPE]
Remote code execution
[DESCRIPTION]
JeecgBoot JimuReport component has a SSTI vulnerability on the /jeecg-boot/jmreport/dictCodeSearch endpoint. Attackers can inject malicious FreeMarker templates to achieve remote code execution.
Discovered by aqyoung
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment