Vulnerabilities

TI-2024-04975 CVE-2024-5356

anji-plus AJ-Report testTransform;swagger-ui sql injection

LOW 26

A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01026 Published 2024-05-26 No fix listed CWE-89

TI-2024-04974 CVE-2024-5355

MEDIUM 59

A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03182 Published 2024-05-26 No fix listed CWE-77

TI-2024-04973 CVE-2024-5354

LOW 25

A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00628 Published 2024-05-26 No fix listed CWE-200

TI-2024-04972 CVE-2024-5353

MEDIUM 57

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00802 Published 2024-05-26 No fix listed CWE-22

TI-2024-04971 CVE-2024-5352

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00769 Published 2024-05-26 No fix listed CWE-502

TI-2024-04970 CVE-2024-5351

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00769 Published 2024-05-26 No fix listed CWE-502

TI-2024-04969 CVE-2024-5350

LOW 25

A vulnerability was found in anji-plus AJ-Report up to 1.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00597 Published 2024-05-25 No fix listed CWE-89

TI-2022-23269 CVE-2022-46973 · GHSA-ww52-r3fc-hc5v

MEDIUM 44

Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2023-03-03 No fix listed CWE-918

TI-2022-20961 CVE-2022-42983 · GHSA-m9p4-5j4f-2r9g

MEDIUM 44

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01739 Published 2022-10-17 No fix listed CWE-290