VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 3, 2024· Updated Apr 17, 2025

CVE-2023-49442

CVE-2023-49442

Description

Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.

Affected products

2
  • JEECG/JEECGdescription
  • Jeecg/JEECGllm-create
    Range: <=4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.