Back to Database
Status published
Critical
CVE-2024-7314
anji-plus AJ-Report Authentication Bypass
Vulnerability Description
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7314
Credits & Attribution
No credits recorded in the NVD database.
References
More from anji-plus
View All →CVE-2024-5356
anji-plus AJ-Report testTransform;swagger-ui sql injection
Medium
5.3
CVE-2024-5355
anji-plus AJ-Report IGroovyHandler command injection
Medium
5.3
CVE-2024-5354
anji-plus AJ-Report detailByCode information disclosure
Medium
5.3
CVE-2024-5353
anji-plus AJ-Report ZIP File decompress path traversal
Medium
5.3
CVE-2024-5352
anji-plus AJ-Report validationRules deserialization
Medium
5.3
Affected Vendor
anji-plus
View all reports →Affected Software
AJ-Report
Vulnerable Versions:
0
Timeline
Official Publish:
August 2nd, 2024
Last Modified:
November 22nd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H