- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 1 critical, 1 high, 1 medium
- Registry
- Maven Central
Advisories 8
- CVE-2024-57606High 7.5
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain…
Affected: fixed in 3.7.3.
- CVE-2023-41544Unrated
SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to…
Affected: through 3.5.3.
- CVE-2023-41543Unrated
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the…
Affected: through 3.5.3.
- CVE-2023-41542Critical 9.8
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information…
Affected: through 3.5.3.
- CVE-2023-47467Unrated
Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file…
Affected: through 3.6.0.
- CVE-2023-40989Unrated
SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted…
Affected: fixed in 3.6.0.
- CVE-2023-38992Unrated
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.
Affected: fixed in 3.5.3.
- CVE-2023-1454Medium 6.3
jeecg-boot qurestSql sql injection
Affected: through 3.5.0.