JB
Product
Jeecg Boot
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 11Medium 19Low 6
Watch
Add Jeecg Boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43028 | 9.8 | Apr 1 | A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request Affected: 3.0 through 3.5.3 |
| CVE-2024-40489 | 9.8 | Apr 1 | There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through… Affected: 3.0 through 3.5.3 |
| CVE-2024-48307 | 9.8 | Oct 31 | JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData Affected: 3.7.1 |
| CVE-2023-41544 | 9.8 | Dec 30 | SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component Affected: through 3.5.3 |
| CVE-2023-41543 | 9.8 | Dec 30 | SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check Affected: through 3.5.3 |
| CVE-2023-41542 | 9.8 | Dec 30 | SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component Affected: through 3.5.3 |
| CVE-2023-40989 | 9.8 | Sep 22 | SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the… Affected: 3.0; 3.5.3 |
| CVE-2023-42268 | 9.8 | Sep 8 | Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show Affected: through 3.5.3 |
| CVE-2023-38992 | 9.8 | Jul 28 | jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData Affected: 3.5.1 |
| CVE-2023-34659 | 9.8 | Jun 16 | jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface Affected: 3.5.0; 3.5.1 |
| CVE-2023-1784 | 9.8 | Mar 31 | A vulnerability was found in jeecg-boot 3.5.0 and classified as critical Affected: 3.5.0 |
| CVE-2023-1741 | 9.8 | Mar 30 | A vulnerability was found in jeecg-boot 3.5.0 Affected: 3.5.0 |
| CVE-2023-1454 | 9.8 | Mar 17 | A vulnerability classified as critical has been found in jeecg-boot 3.5.0 Affected: 3.5.0 |
| CVE-2022-47105 | 9.8 | Jan 19 | Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData Affected: 3.4.4 |
| CVE-2022-45207 | 9.8 | Nov 25 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString Affected: 3.4.3 |
| CVE-2022-45206 | 9.8 | Nov 25 | Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check Affected: 3.4.3 |
| CVE-2022-2647 | 9.8 | Aug 4 | jeecg-boot unrestricted upload Affected: All versions, or not specified |
| CVE-2022-22881 | 9.8 | Feb 16 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData Affected: through 3.0 |
| CVE-2022-22880 | 9.8 | Feb 16 | Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId Affected: through 3.0 |
| CVE-2021-46089 | 9.8 | Jan 25 | In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges Affected: 3.0 |
| CVE-2020-28088 | 9.8 | Aug 6 | An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code Affected: 2.3 |
Showing 21