Anji-plus Aj-report — known CVE vulnerabilities

Every CVE whose affected-product data names Anji-plus Aj-report, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-46973 — CVSS 9.8 (critical): Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
• CVE-2022-42983 — CVSS 8.8 (high): anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.
• CVE-2024-5351 — CVSS 6.3 (medium): A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been declared as critical. Affected by this vulnerability is the…
• CVE-2024-5352 — CVSS 6.3 (medium): A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been rated as critical. Affected by this issue is the function…
• CVE-2024-5353 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the…
• CVE-2024-5355 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1. This issue affects the function…
• CVE-2024-5356 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Affected is an unknown function of the…
• CVE-2024-5350 — CVSS 6.3 (medium): A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the…
• CVE-2024-5354 — CVSS 4.3 (medium): A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1. This vulnerability affects unknown code of the file…