CVE-2025-8963
A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely. The vendor response to the GitHub issue report is: "Modified, next version updated".
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - cna@vuldb.com
- Published
- 2025-08-14
- Last modified
- 2025-08-14
- Weaknesses
- CWE-20, CWE-502
Affected products
References
- https://github.com/jeecgboot/jimureport/issues/4010
- https://github.com/jeecgboot/jimureport/issues/4010#issuecomment-3182053855
- https://vuldb.com/?ctiid.319958
- https://vuldb.com/?id.319958
- https://vuldb.com/?submit.628028
