CVE-2024-10919

Name of the Vulnerable Software and Affected Versions didi Super-Jacoco version 1.0

Description A critical issue has been found in the software, affecting an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the uuid argument leads to os command injection. This issue can be exploited remotely, potentially allowing system takeover. The exploit has been disclosed publicly.

Recommendations For didi Super-Jacoco version 1.0, patch immediately to prevent os command injection via the uuid parameter in the /cov/triggerUnitCover file. As a temporary workaround, consider restricting access to the /cov/triggerUnitCover file until a patch is available. Verify that there has been no unauthorized access to the system.