PT-2026-29548 · Unknown · Jeecg-Boot

Published 2026-04-01 · Updated 2026-04-02 · CVE-2024-43028

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jeecg boot versions 3.0.0 through 3.5.3

Description A command injection vulnerability exists in the /jmreport/show component. Attackers can execute arbitrary code by sending a specially crafted HTTP request.

Recommendations Update to a version beyond 3.5.3.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-43028

Affected Products

Jeecg-Boot

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-43028 · Security Note
• https://gist.github.com/aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b · Note
• https://twitter.com/CveFindCom/status/2039670295229800929 · Twitter Post
• https://pan.baidu.com/s/1h2RGEvxuvsKtsn2-TlFlmA?pwd=gf5r · Note