Jeecgboot vulnerabilities
113 CVEs and advisories name Jeecgboot as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-112017JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass
- CVE-2026-108891JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId
- CVE-2026-108888JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
- CVE-2026-108887JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
- CVE-2026-108886JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername
- CVE-2026-108885JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
- CVE-2026-108884JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint
- CVE-2026-108883JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig
- CVE-2026-108882JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser
- CVE-2026-108881JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo
- CVE-2026-108880JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
- CVE-2026-108879JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
- CVE-2026-108878JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
- CVE-2026-108877JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
- CVE-2026-108876JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
- CVE-2026-108875JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
- CVE-2026-108874JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson
- CVE-2026-108873JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
- CVE-2026-108872JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
- CVE-2026-108871JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule
- CVE-2026-108870JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
- CVE-2026-108869JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
- CVE-2026-108868JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement
- CVE-2026-108867JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
- CVE-2026-108866JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths
- CVE-2026-108680JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement
- CVE-2026-108679JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement
- CVE-2026-108678JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles
- CVE-2026-108677JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName
- CVE-2026-108676JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles