CVE-2024-10435

Name of the Vulnerable Software and Affected Versions didi Super-Jacoco version 1.0

Description A critical issue has been identified, affecting unknown code in the file /cov/triggerEnvCov. The manipulation of the uuid argument leads to command injection. This issue can be exploited remotely.

Recommendations For didi Super-Jacoco version 1.0, as a temporary workaround, consider restricting access to the /cov/triggerEnvCov file to minimize the risk of exploitation. Avoid using the uuid argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.