Skip to content
OpenAdvisories

Package · Maven

org.jeecgframework.boot:jeecg-boot-parent

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-38905

    Jeecg-boot SQL Injection vulnerability

    SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 6.5
    CVE-2023-34660

    jeecg-boot unrestricted file upload vulnerability

    jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 5.3
    CVE-2023-1784

    jeecg-boot API Documentation improper authentication

    A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentation. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has b…

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • Medium 4.3
    CVE-2023-1741

    jeecg-boot Sleep Command SysDictMapper.java sql injection

    A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file SysDictMapper.java of the component Sleep Command Handler. The manipulation leads to sql injection. The …

    org.jeecgframework.boot:jeecg-boot-parent Maven