RULE(RULE ID:338289)

Rule General Information
Release Date: 2024-08-06
Rule Name: Yonyou Chanjet T+ ajaxpro Server-Side Request Forgery Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou Chanjet T+is a financial management and business management software for small and medium-sized enterprises. It aims to improve the operational efficiency of enterprises through integrated operations, and realize the automation and intelligence of financial and business processes. Yonyou Chanjet T+ ajaxpro has a server side request forgery vulnerability, which allows attackers to access or control unauthorized systems through server initiated requests.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.