CVE-2024-11251

Summary

CVE-2024-11251 is a critical vulnerability affecting erzhongxmu Jeewms up to version 20241108. The issue lies in the processing of the file cgReportController.do within the AuthInterceptor component. Manipulation of the begin_date argument results in SQL injection, potentially allowing remote attackers to exploit the vulnerability. The exact impacted and protected releases are unknown due to the lack of versioning in the product. Other parameters could also be susceptible to similar attacks. This vulnerability has been publicly disclosed, increasing the risk for potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.