Anji-plus Report vulnerabilities

• anji-plus aj-report AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token CVE-2026-120209 Public exploit 9.3 CriticalOctober 31, 2026
• anji-plus aj-report, report +1 more anji-plus AJ-Report Authentication Bypass CVE-2024-7314 EPSS 51.7% 9.8 CriticalAugust 2, 2024
• anji-plus aj-report anji-plus AJ-Report testTransform;swagger-ui sql injection CVE-2024-5356 Public exploit 5.3 MediumMay 26, 2024
• anji-plus aj-report, report +1 more anji-plus AJ-Report IGroovyHandler command injection CVE-2024-5355 5.3 MediumMay 26, 2024
• anji-plus aj-report, report +1 more anji-plus AJ-Report detailByCode information disclosure CVE-2024-5354 5.3 MediumMay 26, 2024
• anji-plus aj-report anji-plus AJ-Report ZIP File decompress path traversal CVE-2024-5353 5.3 MediumMay 26, 2024
• anji-plus aj-report anji-plus AJ-Report validationRules deserialization CVE-2024-5352 5.3 MediumMay 26, 2024
• anji-plus aj-report anji-plus AJ-Report Javascript getValueFromJs deserialization CVE-2024-5351 5.3 MediumMay 26, 2024
• anji-plus aj-report anji-plus AJ-Report pageList sql injection CVE-2024-5350 5.3 MediumMay 25, 2024
• anji-plus aj-report Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability. CVE-2022-46973 9.8 CriticalMarch 3, 2023
• anji-plus aj-report anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing... CVE-2022-42983 8.8 HighOctober 17, 2022