Description
No description available.
JeecgBoot JimuReport积木报表 /jmreport/save 未授权 表达式注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/JeecgBoot/JeecgBoot%E7%B3%BB%E7%BB%9FAviatorScript%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://ilikeoyt.github.io/2024/08/13/jeecgboot-%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87-AviatorScript%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.wangsu.com/news/content/blog/3742
https://blog.csdn.net/css33/article/details/150103269
https://whoopsunix.com/docs/java/Expression/Aviator/
https://zhuanlan.zhihu.com/p/1888282077968958078
https://fuping.site/2024/08/10/Jmreport-Auth-Bypass-Mitigation/
https://www.cnblogs.com/CVE-Lemon/collections/11743
https://y4tacker.github.io/2024/08/02/year/2024/8/%E6%9C%80%E6%96%B0%E7%89%88JeecgBoot%E7%AC%AC%E4%BA%8C%E5%BC%B9%E4%B9%8B%E5%8F%97%E9%99%90%E6%9D%A1%E4%BB%B6%E4%B8%8B%E7%9A%84%E5%86%85%E5%AD%98%E9%A9%AC%E6%B3%A8%E5%85%A5%E5%AE%9E%E5%BD%95/
https://www.sxcast.edu.cn/uploadfile/ueditor/file/202510/1761869308d5a4ea.pdf