A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

Description

References

https://gist.github.com/aqyoung/e3b7ba5d8b8261df7d09931dbe779b3b
https://pan.baidu.com/s/1h2RGEvxuvsKtsn2-TlFlmA?pwd=gf5r

CISA KEV❌ No

Actively exploited❌ No

PublishedApr 1, 2026

Last enriched52m ago

Trending Score0

Source articles0

Independent0

Info Completeness3/14

Missing: vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Apr 1, 2026

Discovered by ZDM

Apr 1, 2026