report vulnerabilities

2 known vulnerabilities in report from Anji-plus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  AJ-Report: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-7314Aug 2, 2024Anji-plusEPSS 51.7%

  anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was obser

• 9.8 Critical severity

  AJ-Report: Improper Neutralization of Special Elements used in a Command

  CVE-2024-5355May 26, 2024Anji-plusEPSS 3.18%

  A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1. This issue affects the function IGroovyHandler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclo