Skip to content
OpenAdvisories

Package · Maven

org.jeecgframework.boot:jeecg-boot-common

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.5
    CVE-2024-57606

    SQL injection in JeecgBoot

    SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.8
    CVE-2023-41543

    Jeecg Boot SQL Injection

    SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.8
    CVE-2023-41542

    Jeecg Boot SQL injection vulnerability

    SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.1
    CVE-2023-41544

    JeecgBoot server-side template injection

    SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Medium 6.5
    CVE-2023-47467

    Directory Traversal in jeecg-boot

    Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.8
    CVE-2023-40989 Public exploit

    SQL injection in jeecgboot

    SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.8
    CVE-2023-38992 Scanner template EPSS 73%

    SQL injection in jeecg-boot

    jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Medium 6.3
    CVE-2023-1454 Public exploit Scanner template EPSS 36%

    jeecg-boot qurestSql sql injection

    A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The ex…

    org.jeecgframework.boot:jeecg-boot-common Maven