CVE-2023-2476

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-227868.

• CWE-79

• https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134dPermissions Required
• https://gitee.com/dromara/J2EEFAST/issues/I6W380Exploit, Issue Tracking
• https://vuldb.com/?ctiid.227868Permissions Required, VDB Entry
• https://vuldb.com/?id.227868Permissions Required, VDB Entry
• https://gitee.com/dromara/J2EEFAST/commit/7a9e1a00e3329fdc0ae05f7a8257cce77037134dPermissions Required
• https://gitee.com/dromara/J2EEFAST/issues/I6W380Exploit, Issue Tracking
• https://vuldb.com/?ctiid.227868Permissions Required, VDB Entry
• https://vuldb.com/?id.227868Permissions Required, VDB Entry

Published

May 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24752libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24754libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24755libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24756libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24757libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24758libde265 v1.0.10 was discovered to contain a NULL pointer de…5.5
• CVE-2023-24760An issue found in Ofcms v.1.1.4 allows a remote attacker to …8.8
• CVE-2023-24762OS Command injection vulnerability in D-Link DIR-867 DIR_867…9.8
• CVE-2023-24763In the module "Xen Forum" (xenforum) for PrestaShop, an auth…8.8
• CVE-2023-24769Changedetection.io before v0.40.1.1 was discovered to contai…5.4
• CVE-2023-2477A vulnerability was found in Funadmin up to 3.2.3. It has be…6.1
• CVE-2023-24773Funadmin v3.2.0 was discovered to contain a SQL injection vu…9.8