CVE-2023-2475

A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-227867.

• CWE-79

• https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134dPermissions Required
• https://gitee.com/dromara/J2EEFAST/issues/I6W390Exploit, Issue Tracking
• https://vuldb.com/?ctiid.227867Permissions Required, VDB Entry
• https://vuldb.com/?id.227867VDB Entry
• https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134dPermissions Required
• https://gitee.com/dromara/J2EEFAST/issues/I6W390Exploit, Issue Tracking
• https://vuldb.com/?ctiid.227867Permissions Required, VDB Entry
• https://vuldb.com/?id.227867VDB Entry

Published

May 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24735PMB v7.4.6 was discovered to contain an open redirect vulner…6.1
• CVE-2023-24736PMB v7.4.6 was discovered to contain a remote code execution…9.8
• CVE-2023-24737PMB v7.4.6 was discovered to contain a reflected cross-site …6.1
• CVE-2023-2474A vulnerability has been found in Rebuild 3.2 and classified…4.3
• CVE-2023-24744Cross Site Scripting (XSS) vulnerability in Rediker Software…6.1
• CVE-2023-24747Jfinal CMS v5.1 was discovered to contain a cross-site scrip…5.4
• CVE-2023-24751libde265 v1.0.10 was discovered to contain a NULL pointer de…6.5
• CVE-2023-24752libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24754libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24755libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24756libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24757libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5