CVE-2025-8963 - jeecgboot JimuReport Data Large Screen Template testConnection deserialization

Back Back to CVE browser

MEDIUM

jeecgboot JimuReport Data Large Screen Template testConnection deserialization

Published Aug 14, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.49%

Description

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely. The vendor response to the GitHub issue report is: "Modified, next version updated".

Affected products

Vendor Jeecgboot Product JimuReport Default
n/a
- Version
  2.1.0
  Status
  affected
  Constraints
  -
- Version
  2.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jeecgboot

JimuReport

n/a

Version	Status	Constraints
2.1.0	affected	-
2.1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-502

Deserialization of Untrusted Data

References (5)

https://github.com/jeecgboot/jimureport/issues/4010
issue-trackingExploitIssue TrackingThird Party Advisory
https://github.com/jeecgboot/jimureport/issues/4010#issuecomment-3182053855
issue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.319958
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319958
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628028
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/jeecgboot/jimureport/issues/4010		issue-trackingExploitIssue TrackingThird Party Advisory
https://github.com/jeecgboot/jimureport/issues/4010#issuecomment-3182053855		issue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.319958		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319958		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628028		third-party-advisoryThird Party AdvisoryVDB Entry