CVE-2023-49442

Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.

Date published : 2024-01-03

https://lemono.fun/thoughts/JEECG-RCE.html