CVE-2024-45944

Katalog CVE

CVSS 9.8 · Critical EPSS 0,87%

Kerentanan pada j2eefast. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution.

Rincian

Terbit di NVD

18 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/lazy-forever/CVE-Reference/tree/main/2024/45944 exploit · advisory pihak ketiga
• https://gitee.com/dromara/J2EEFAST product
• https://github.com/dromara/J2EEFAST product