CVE-2024-5354

A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1. This vulnerability affects unknown code of the file /reportShare/detailByCode. The manipulation of the argument shareToken leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266266 is the identifier assigned to this vulnerability.

• CWE-200

• https://github.com/anji-plus/report/files/15363269/aj-report.pdfExploit
• https://github.com/anji-plus/report/issues/34Broken Link
• https://vuldb.com/?ctiid.266266Permissions Required, VDB Entry
• https://vuldb.com/?id.266266Permissions Required, VDB Entry
• https://github.com/anji-plus/report/files/15363269/aj-report.pdfExploit
• https://github.com/anji-plus/report/issues/34Broken Link
• https://vuldb.com/?ctiid.266266Permissions Required, VDB Entry
• https://vuldb.com/?id.266266Permissions Required, VDB Entry

Published

May 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5352A vulnerability was found in anji-plus AJ-Report up to 1.4.1…9.8
• CVE-2024-53522Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered …7.5
• CVE-2024-53523JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is …7.5
• CVE-2024-53526composio >=0.5.40 is vulnerable to Command Execution in comp…6.4
• CVE-2024-5353A vulnerability classified as critical has been found in anj…9.8
• CVE-2024-53537An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to e…9.1
• CVE-2024-53542Incorrect access control in the component /iclock/Settings?r…6.5
• CVE-2024-53543NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to …5.4
• CVE-2024-53544NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to …9.8
• CVE-2024-5355A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-53552CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles pa…9.8
• CVE-2024-53553An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 all…9.1