2024-05-25 21:48:12 +02:00
|
|
|
### [CVE-2024-27764](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27764)
|
|
|
|
|

|
|
|
|
|

|
|
|
|
|

|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
|
|
|
|
|
|
An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.
|
|
|
|
|
|
|
|
|
|
### POC
|
|
|
|
|
|
|
|
|
|
#### Reference
|
2024-08-23 18:19:28 +00:00
|
|
|
- https://gitee.com/erzhongxmu/JEEWMS/issues/I8YN90
|
2024-05-25 21:48:12 +02:00
|
|
|
|
|
|
|
|
#### Github
|
|
|
|
|
- https://github.com/fkie-cad/nvd-json-data-feeds
|
|
|
|
|
|