Skip to content
OpenAdvisories

Package · Maven

org.jeecgframework.boot:jeecg-boot-common

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-40989 Public exploit

    SQL injection in jeecgboot

    SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Medium 6.3
    CVE-2023-1454 Public exploit Scanner template EPSS 36%

    jeecg-boot qurestSql sql injection

    A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The ex…

    org.jeecgframework.boot:jeecg-boot-common Maven