org.jeecgframework.boot:jeecg-boot-base-core

6 results · Feed

• Medium 6.5
  CVE-2025-51825

  JeecgBoot SQL Injection Vulnerability

  JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

  org.jeecgframework.boot:jeecg-boot-base-core Maven
  Aug 22, 2025
• Critical 9.8
  CVE-2022-47105

  Jeecg-boot is vulnerable to SQL injection

  Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

  org.jeecgframework.boot:jeecg-boot-base-core org.jeecgframework.boot:jeecg-module-system Maven
  Jan 19, 2023
• Medium 6.1
  CVE-2021-44585

  Cross-site Scripting in jeecg-boot

  A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

  org.jeecgframework.boot:jeecg-boot-base org.jeecgframework.boot:jeecg-boot-base-core Maven
  Mar 10, 2022
• Critical 9.8
  CVE-2022-22880

  SQL Injection in Jeecg-boot

  Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.

  org.jeecgframework.boot:jeecg-boot-base org.jeecgframework.boot:jeecg-boot-base-core Maven
  Feb 16, 2022
• Critical 9.8
  CVE-2022-22881

  SQL Injection in Jeecg-boot

  Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

  org.jeecgframework.boot:jeecg-boot-base org.jeecgframework.boot:jeecg-boot-base-core Maven
  Feb 16, 2022
• Critical 9.8
  CVE-2021-46089

  SQL Injection in JeecgBoot

  In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

  org.jeecgframework.boot:jeecg-boot-base org.jeecgframework.boot:jeecg-boot-base-core Maven
  Jan 25, 2022