org.jeecgframework.boot:jeecg-boot-common

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-41543

  Jeecg Boot SQL Injection

  SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

  org.jeecgframework.boot:jeecg-boot-common Maven
  Dec 30, 2023
• Critical 9.8
  CVE-2023-41542

  Jeecg Boot SQL injection vulnerability

  SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.

  org.jeecgframework.boot:jeecg-boot-common Maven
  Dec 30, 2023
• Critical 9.1
  CVE-2023-41544

  JeecgBoot server-side template injection

  SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.

  org.jeecgframework.boot:jeecg-boot-common Maven
  Dec 30, 2023
• Critical 9.8
  CVE-2023-40989 Public exploit

  SQL injection in jeecgboot

  SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.

  org.jeecgframework.boot:jeecg-boot-common Maven
  Sep 22, 2023
• Critical 9.8
  CVE-2023-38992 Scanner template EPSS 73%

  SQL injection in jeecg-boot

  jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

  org.jeecgframework.boot:jeecg-boot-common Maven
  Jul 28, 2023