CyberRota Analysis
AI-GeneratedJeecgBoot versions up to 3.9.2 are vulnerable due to a server-side request forgery (SSRF) flaw in the Anonymous Chat Attachment Parser, specifically in the /airag/chat/send function. This vulnerability can be exploited remotely, potentially allowing attackers to manipulate server requests and access sensitive information. Organizations using JeecgBoot should prioritize patching this vulnerability, especially those handling sensitive data or exposed to untrusted networks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. A fix is planned for the upcoming release.