Filtered by vendor Anji-plus Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-7314 1 Anji-plus 1 Report 2024-09-17 9.8 Critical
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.
CVE-2022-42983 1 Anji-plus 1 Aj-report 2024-08-08 8.8 High
anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.
CVE-2022-46973 1 Anji-plus 1 Aj-report 2024-08-08 9.8 Critical
Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.