CVE-2023-4450 jeecgboot JimuReport Template injection

What is CVE-2023-4450?

CVE-2023-4450 is a medium-severity vulnerability in jeecgboot JimuReport, published on 21 Aug 2023.

Official description

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571.

Weakness: CWE-74

Which versions are affected by CVE-2023-4450?

It affects 1 product.

Products include Jeecg Jimureport.

How do I fix CVE-2023-4450?

No fix has been published for CVE-2023-4450 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-4450 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-4450 exists.

Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.

Other vulnerabilities in jeecgboot JimuReport

• CVE-2025-66913 Code injection in n/a Critical 9.8
• CVE-2024-44893 Privilege escalation in n/a Critical 9.8
• CVE-2023-6307 jeecgboot JimuReport image path traversal Medium 6.3
• CVE-2025-10770 jeecgboot JimuReport MySQL JDBC testConnection deserialization Medium 5.3
• CVE-2025-10771 jeecgboot JimuReport DB2 JDBC testConnection deserialization Medium 5.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j8h5-8rrr-m6j9.