AJ-Report Authentication Bypass to Remote Code Execution (CNVD-2024-15077)

AJ-Report is an open-source Business Intelligence platform. In versions 1.4.0 and earlier, an authentication bypass vulnerability exists. An attacker can exploit this flaw to circumvent access controls and execute arbitrary code on the server. Patch Comparison Method 1 Extract the compiled code from a Docker container and download the official ...

Posted on Sat, 07 Nov 2026 16:23:25 +0000 by darknuke