anji-plus

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

anji-plus records in CISA KEV

No anji-plus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aj-report 9 records MEDIUM Report 1 record HIGH

Records

11 records

TI-2024-06775 CVE-2024-7314 · GHSA-29j3-7mhp-wmwm

anji-plus AJ-Report Authentication Bypass

HIGH 82

anji-plus AJ-Report is affected by an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.5175 Published 2024-08-02 Fixed in 1.4.1 CWE-288

TI-2024-04974 CVE-2024-5355

anji-plus AJ-Report IGroovyHandler command injection

MEDIUM 59

A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03182 Published 2024-05-26 No fix listed CWE-77

TI-2024-04972 CVE-2024-5353

anji-plus AJ-Report ZIP File decompress path traversal

MEDIUM 57

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00802 Published 2024-05-26 No fix listed CWE-22

TI-2026-83559 CVE-2026-120209 · GHSA-p83w-vf54-73v4

AJ-Report forged share tokens allow unauthenticated code execution

MEDIUM 49

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00544 Published 2026-10-31 No fix listed CWE-321

TI-2022-23269 CVE-2022-46973 · GHSA-ww52-r3fc-hc5v

Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.

MEDIUM 44

Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2023-03-03 No fix listed CWE-918

TI-2022-20961 CVE-2022-42983 · GHSA-m9p4-5j4f-2r9g

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

MEDIUM 44

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01739 Published 2022-10-17 No fix listed CWE-290

TI-2024-04975 CVE-2024-5356

anji-plus AJ-Report testTransform;swagger-ui sql injection

LOW 26

A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01026 Published 2024-05-26 No fix listed CWE-89

TI-2024-04973 CVE-2024-5354

anji-plus AJ-Report detailByCode information disclosure

LOW 25

A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00628 Published 2024-05-26 No fix listed CWE-200

TI-2024-04971 CVE-2024-5352

anji-plus AJ-Report validationRules deserialization

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00769 Published 2024-05-26 No fix listed CWE-502

TI-2024-04970 CVE-2024-5351

anji-plus AJ-Report Javascript getValueFromJs deserialization

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00769 Published 2024-05-26 No fix listed CWE-502

TI-2024-04969 CVE-2024-5350

anji-plus AJ-Report pageList sql injection

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00597 Published 2024-05-25 No fix listed CWE-89

Open these records in search →

Critical	3
High	1
Medium	7
Low	0
No CVSS	0