Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-51825 1 Jeecg 1 Jeecgboot 2025-08-23 6.5 Medium
JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.
CVE-2024-48307 1 Jeecg 2 Jeecg Boot, Jeecgboot 2025-06-27 9.8 Critical
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
CVE-2023-34603 1 Jeecg 1 Jeecgboot 2024-12-12 7.5 High
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.
CVE-2023-34602 1 Jeecg 1 Jeecgboot 2024-12-12 7.5 High
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.