Critical severity9.8NVD Advisory· Published Apr 1, 2026· Updated Jun 17, 2026
CVE-2024-40489
CVE-2024-40489
Description
There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 3.0.0-3.5.3
Patches
Vulnerability mechanics
References
2- gist.github.com/aqyoung/2fd6329ceb06b731a621356921f0d5f0nvdThird Party Advisory
- pan.baidu.com/s/14WOPXhRHoxr4FRKGme59ugnvdPermissions Required
News mentions
0No linked articles in our index yet.