- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 12 · 1 critical, 3 high, 2 medium
- Registry
- Maven Central
Advisories 12
- CVE-2024-48307Critical 9.8
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
Affected: through 3.7.1.
- CVE-2023-42268Unrated
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
Affected: through 3.5.3.
- CVE-2023-41578Unrated
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
Affected: through 3.5.3.
- CVE-2023-38905Unrated
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark…
Affected: through 3.5.0.
- CVE-2023-34603High 7.5
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at…
Affected: fixed in 3.5.1.
- CVE-2023-34602High 7.5
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at…
Affected: fixed in 3.5.1.
- CVE-2023-34660Unrated
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Affected: through 3.5.0.
- CVE-2023-34659Unrated
jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.
Affected: from 3.5.0, through 3.5.1.
- CVE-2023-1784Medium 5.3
jeecg-boot API Documentation improper authentication
Affected: through 3.5.0.
- CVE-2023-1741Medium 4.3
jeecg-boot Sleep Command SysDictMapper.java sql injection
Affected: through 3.5.0.
- CVE-2023-24789High 8.8
jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.
Affected: through 3.4.4.
- CVE-2020-28088Unrated
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
Affected: through 2.3.