CVE-2024-46535

Impact

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gitee.com/ketr/jepaas-release/issues/IAPJ8H?from=project-issue