CVE-2024-7314General(anji-plus / report)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-288

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • report

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
report

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-30: 105-30
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • zerizeri(インフラエンジニア技術ブログ)@zerizerizeri_bl
    General

    【WAFログ速報】 128.199.129.101(11回): /upgrade/detail.jsp/login/LoginSSO.jsp?id=、/bsh.servlet.BshServlet、/dataSetParam/verification%3bswagger-uiなどに対しシステムの脆弱性(CNVD-2021-33202、CNVD-2021-30167、CVE-2024-7314)を探る試行が確認。 #WAF #セキュリティ #脅威検知 https://t.co/PR4WwnYmmV

    Post summary

    WAF logs reveal multiple probing attempts from a single IP targeting several known vulnerabilities, including CVE-2024-7314, but no exploit activity or defensive measures are detailed.

    0000056
    45 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appanji-plusreport---

Explore more