Anji-Plus: >> Report >> 0.9.8.6 Security Vulnerabilities
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.
CVSS Score
9.8
EPSS Score
0.759
Published
2024-08-02