← Back to browse · API

CVE-2023-49442

Severity

CRITICAL

CVSS

9.8

EPSS

0.38549

Risk score

52.69

CISA KEV

No

PoC

No

Published

2024-01-03

Modified

2025-04-17

First seen

2026-08-07

Aliases

EUVD-2023-53406, GHSA-RF4Q-9M5J-M24R

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-53406

Description

Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.

References