CVE-2024-5355

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published May 26, 2024
Updated: May 28, 2024
CWE ID 77

Summary

CVE-2024-5355 is a critical vulnerability discovered in anji-plus AJ-Report up to version 1.4.1, affecting the IGroovyHandler function. This vulnerability allows for command injection, which can be exploited remotely. The exploit has been made public and poses a potential threat to organizations using the affected product. The vulnerability has a CVSS score of 6.5, indicating its severity. It requires low privileges and does not require user interaction to execute the attack. The impact on integrity and confidentiality is low, but it can still be dangerous if left unremediated. No specific remediation steps were provided in the given information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-5355 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options