CVE-2023-4450 is a critical injection vulnerability affecting jeecgboot JimuReport up to version 1.6.0, specifically within its Template Handler component. This flaw allows for remote, unauthenticated attacks with high impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 9.8. While not listed on the KEV catalog, public exploit code, including Nuclei templates, is available, and it has garnered significant community discussion, suggesting a high likelihood of exploitation. Upgrading to JimuReport 1.6.1 is recommended to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.6.1CPE matchmatch criteria | cpe:2.3:a:jeecg:jimureport:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.