CRITICAL

CVE-2023-4450

CVSS v3

9.8

CRITICAL

EPSS Score

91.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.

Technical details

Published
8/21/2023

Frequently asked questions

What is CVE-2023-4450?

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.

Is CVE-2023-4450 actively exploited?

Active exploitation of CVE-2023-4450 has not been confirmed. The EPSS score is 91.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-4450?

CVE-2023-4450 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2023-4450 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.