Skip to content
OpenAdvisories

Package · Maven

org.jeecgframework.boot:jeecg-boot-parent

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.8
    CVE-2024-48307 Public exploit Scanner template EPSS 50%

    JeecgBoot SQL Injection vulnerability

    JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • High 7.5
    CVE-2023-41578

    Jeecg boot arbitrary file read vulnerability

    Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Critical 9.8
    CVE-2023-42268

    Jeecg boot SQL Injection vulnerability

    Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 5.5
    CVE-2023-38905

    Jeecg-boot SQL Injection vulnerability

    SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • High 7.5
    CVE-2023-34602

    JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode

    JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • High 7.5
    CVE-2023-34603

    JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo

    JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Critical 9.8
    CVE-2023-34659 Scanner template EPSS 12%

    jeecg-boot SQL injection vulnerability

    jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 6.5
    CVE-2023-34660

    jeecg-boot unrestricted file upload vulnerability

    jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 5.3
    CVE-2023-1784

    jeecg-boot API Documentation improper authentication

    A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentation. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has b…

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 4.3
    CVE-2023-1741

    jeecg-boot Sleep Command SysDictMapper.java sql injection

    A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file SysDictMapper.java of the component Sleep Command Handler. The manipulation leads to sql injection. The …

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • High 8.8
    CVE-2023-24789

    jeecg-boot contains SQL Injection vulnerability

    jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Critical —
    CVE-2020-28088

    Jeecg-Boot CMS arbitrary file upload vulnerability

    An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

    org.jeecgframework.boot:jeecg-boot-parent Maven