Description
Jeecgboot 存在命令执行漏洞， 攻击者可以执行任意命令以获取服务器敏感信息以及权限。
Jeecgboot /jmreport/save远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/jeecgboot/JeecgBoot/issues/7014
https://www.cnblogs.com/CVE-Lemon/p/18392679
https://fuping.site/2024/08/10/Jmreport-Auth-Bypass-Mitigation/
https://ilikeoyt.github.io/2024/08/13/jeecgboot-%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87-AviatorScript%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://cn-sec.com/archives/3245442.html
https://blog.csdn.net/css33/article/details/150103269
https://whoopsunix.com/docs/java/Expression/Aviator/
https://zhuanlan.zhihu.com/p/1888282077968958078