VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 1, 2026· Updated Apr 6, 2026

CVE-2024-40489

CVE-2024-40489

Description

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Jeecg/Jeecgboot2 versions
    cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:*range: >=3.0,<=3.5.3
    • (no CPE)range: >=3.0.0, <=3.5.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.