Product
JimuReport versions 2.3.4 and earlier contain an authentication bypass vulnerability allowing unauthenticated actors to enumerate reports and exfiltrate sensitive data via leaked share tokens.