Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitee.com/ketr/jepaas-release/issues/IAPJ8H?from=project-issue | Exploit Issue Tracking Vendor Advisory |
Configurations
History
03 Jul 2025, 13:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ketr jepaas
Ketr |
|
| CPE | cpe:2.3:a:ketr:jepaas:7.2.8:*:*:*:*:*:*:* | |
| References | () https://gitee.com/ketr/jepaas-release/issues/IAPJ8H?from=project-issue - Exploit, Issue Tracking, Vendor Advisory |
14 Oct 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-14 17:15
Updated : 2025-07-03 13:11
NVD link : CVE-2024-46535
Mitre link : CVE-2024-46535
JSON object : View
Products Affected
ketr
- jepaas
CWE
No CWE.