Jeecgboot vulnerabilities
113 CVEs and advisories name Jeecgboot as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-108615JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete
- CVE-2026-108614JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls
- CVE-2026-108613JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint
- CVE-2026-108612JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
- CVE-2026-108611JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint
- CVE-2026-108610JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
- CVE-2026-108609JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter
- CVE-2026-108608JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter
- CVE-2026-108607JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
- CVE-2026-108606JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById
- CVE-2026-108605JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint
- CVE-2026-82629jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload
- CVE-2026-75479JimuReport Unauthenticated Report Listing and Share Token Disclosure
- CVE-2026-58377JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
- CVE-2026-58375JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export
- CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgery
- CVE-2026-5848jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection
- CVE-2025-12626jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal
- CVE-2025-10771jeecgboot JimuReport DB2 JDBC testConnection deserialization
- CVE-2025-10770jeecgboot JimuReport MySQL JDBC testConnection deserialization
- CVE-2025-8963jeecgboot JimuReport Data Large Screen Template testConnection deserialization
- CVE-2023-6307jeecgboot JimuReport image path traversal
- CVE-2023-4450jeecgboot JimuReport Template injection