.. / CVE-2021-37304

• Info Disclosure
• Nuclei
• Web

Exploit for Jeecg Boot <= 2.4.5 - Information Disclosure (CVE-2021-37304)

Description:

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

Nuclei Template

View the template here CVE-2021-37304.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-37304.yaml

References: