- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 7 · 3 high
- Registry
- Maven Central
Advisories 7
- CVE-2021-37306High 7.5
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive…
Affected: through 2.4.5.
- CVE-2021-37305High 7.5
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive…
Affected: through 2.4.5.
- CVE-2021-37304High 7.5
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive…
Affected: through 2.4.5.
- CVE-2021-44585Unrated
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
Affected: fixed in 3.1.0.
- CVE-2022-22881Unrated
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
Affected: through 3.0.
- CVE-2022-22880Unrated
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
Affected: through 3.0.
- CVE-2021-46089Unrated
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
Affected: through 3.0.