MEDIUM
anji-plus AJ-Report IGroovyHandler command injection
Published May 26, 2024
5.3
MEDIUMCVSS 4.0
EPSS 3.18%
Description
A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1. This issue affects the function IGroovyHandler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266267.
Affected products
-
- Version 1.4.0StatusaffectedConstraints-
- Version 1.4.1StatusaffectedConstraints-
- Version
-
- Version 1.4.0StatusaffectedConstraints<=1.4.1
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46580 Advisory
- https://github.com/anji-plus/report/files/15363269/aj-report.pdf exploit
- https://github.com/anji-plus/report/issues/34 issue-trackingBroken Link
- https://vuldb.com/?ctiid.266267 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.266267 vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46580 | Advisory | |
| https://github.com/anji-plus/report/files/15363269/aj-report.pdf | exploit | |
| https://github.com/anji-plus/report/issues/34 | issue-trackingBroken Link | |
| https://vuldb.com/?ctiid.266267 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.266267 | vdb-entrytechnical-descriptionPermissions RequiredVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published May 26, 2024
Updated Aug 1, 2024
Reserved May 25, 2024
Link CVE-2024-5355
CISA Vulnrichment
Updated May 28, 2024
ENISA EUVD
EUVD-2024-46580 Assigner VulDB
Published May 26, 2024
Updated Aug 1, 2024
Exploited since n/a
Link EUVD-2024-46580