Skip to content

Instantly share code, notes, and snippets.

@aqyoung

aqyoung/gist:e3b7ba5d8b8261df7d09931dbe779b3b Secret

Last active April 2, 2026 01:43
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2024-43028
Raw
gistfile1.txt
[CVE ID]
CVE-2024-43028
[PRODUCT]
JeecgBoot JimuReport
[Affected Product Code Base]
version >= 3.0.0 - version <= 3.5.3
[PROBLEM TYPE]
SSTI (Server-Side Template Injection)
[DESCRIPTION]
JeecgBoot JimuReport component has a SSTI vulnerability on the /jeecg-boot/jmreport/getQueryInfo endpoint. Insufficient input validation leads to remote code execution via malicious FreeMarker templates.
Discovered by aqyoung
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment