{"vulnerability": "CVE-2023-4098", "sightings": [{"uuid": "03d09e5c-f79a-4dbe-82cc-1259b9d8525d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4098", "type": "seen", "source": "https://t.me/cibsecurity/71491", "content": "\u203c CVE-2023-4098 \u203c\n\nIt has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T16:41:15.000000Z"}, {"uuid": "be267133-bd5d-4ed7-8356-b1ff66fdc281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-40980", "type": "seen", "source": "https://t.me/cibsecurity/69667", "content": "\u203c CVE-2023-40980 \u203c\n\nFile Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:18.000000Z"}, {"uuid": "406e07fa-7d24-4242-917b-e81691e94e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-40989", "type": "seen", "source": "https://t.me/cibsecurity/70957", "content": "\u203c CVE-2023-40989 \u203c\n\nSQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-23T00:32:04.000000Z"}]}