CVE-2023-4450

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.

• CWE-74
• CWE-74

• https://github.com/keecth/bug/blob/main/jimureport%20ssti(RCE).mdBroken Link
• https://vuldb.com/?ctiid.237571Permissions Required, VDB Entry
• https://vuldb.com/?id.237571VDB Entry
• https://github.com/keecth/bug/blob/main/jimureport%20ssti(RCE).mdBroken Link
• https://vuldb.com/?ctiid.237571Permissions Required, VDB Entry
• https://vuldb.com/?id.237571VDB Entry

Published

Aug 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44484Online Blood Donation Management System v1.0 is vulnerable t…6.1
• CVE-2023-44485Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-44486Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resou…7.5
• CVE-2023-44488VP9 in libvpx before 1.13.1 mishandles widths, leading to a …7.5
• CVE-2023-4449A vulnerability was found in SourceCodester Free and Open So…8.8
• CVE-2023-4451Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-4452A vulnerability has been identified in the EDR-810, EDR-G902…7.5
• CVE-2023-4453Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-4454Cross-Site Request Forgery (CSRF) in GitHub repository walla…5.7
• CVE-2023-4455Cross-Site Request Forgery (CSRF) in GitHub repository walla…6.5
• CVE-2023-4456A flaw was found in openshift-logging LokiStack. The key use…6.5