Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jeecgframework.boot:jeecg-boot-base-core

6 known vulnerabilities (1 critical, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 1 medium
Registry
Maven Central

Advisories 6

  • CVE-2025-51825Medium 6.5

    JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the…

    Affected: from 3.4.3, fixed in 3.8.1.

  • CVE-2022-47105Critical 9.8

    Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

    Affected: through 3.4.4.

  • A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

    Affected: fixed in 3.1.0.

  • Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

    Affected: through 3.0.

  • Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.

    Affected: through 3.0.

  • In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

    Affected: through 3.0.