Skip to content
Sign in
3.5 Low

CVE-2023-2475 A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic

Description

A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-227867.

Affected products and versions

Product Affected versions Fixed in
J2eeFAST 2.6 No fix stated
J2eeFAST 2.5 No fix stated
J2eeFAST 2.4 No fix stated
J2eeFAST 2.3 No fix stated
J2eeFAST 2.2 No fix stated
J2eeFAST 2.1 No fix stated
J2eeFAST 2.0 No fix stated

Other CVEs of J2eeFAST

The 3 CVEs of J2eeFAST →
CVE-2024-33153 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the… 9.8 Critical CVE-2023-2476 A vulnerability was found in Dromara J2eeFAST up to 2.6.0 3.5 Low
Track this CVE