github.combroken linkexploitissue tracking
https://github.com/keecth/bug/blob/main/jimureport%20ssti(RCE).md CVE-2023-4450
MEDIUMNuclei
jeecgboot JimuReport Template injection
Record summary
CVE-2023-4450 has a selected CVSS score of 6.3 (medium); EIP currently links 1 Nuclei template.
Description
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Aug 6, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 2, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
jimureportBrowse jeecg / jimureport | VulnCheck | Version data not supplied | |
JimuReportBrowse jeecgboot / JimuReport | CVE List | 1.0 | affected |
| 1.1 | affected | ||
| 1.2 | affected | ||
| 1.3 | affected | ||
| 1.4 | affected | ||
| 1.5 | affected | ||
| 1.6 | affected | ||
Nuclei templates
1ProjectDiscoveryCRITICALJeecgBoot JimuReport - Template injection
A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Impact
Unauthorized api called /jmreport/queryFieldBySql led to remote arbitrary code execution due to parsing SQL statements using Freemarker.
Remediation
Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component.
AuthorsSumanth Vankineni
Template tagscvecve2023rcejeecgbootvkevvuln
Shodan: title:"Jeecg-Boot"
Shodan: http.title:"jeecg-boot"
FOFA: title="JeecgBoot 企业级低代码平台"
FOFA: title="jeecg-boot"
FOFA: title="jeecgboot 企业级低代码平台"
Google: intitle:"jeecg-boot"
https://github.com/advisories/GHSA-j8h5-8rrr-m6j9 https://whoopsunix.com/docs/java/named%20module/ https://nvd.nist.gov/vuln/detail/CVE-2023-4450
Source: ProjectDiscovery
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-4450 vuldb.comsignaturepermissions required
https://vuldb.com/?ctiid.237571 vuldb.comvdb entryTechnical description
https://vuldb.com/?id.237571