Login Request a demo
JE
Product
Jeecg
by Jeecg · last CVE Jan 3, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 0
Severity
All severities6Critical1High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jeecg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24789
8.8
1%
Mar 6
jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component
Affected: 3.4.4
CVE-2021-37306
7.5
1%
Feb 3
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api…
Affected: through 2.4.5
CVE-2021-37305
7.5
4%
Feb 3
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri:…
Affected: through 2.4.5
CVE-2021-37304
7.5
4%
Feb 3
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface
Affected: through 2.4.5
CVE-2020-20948
7.5
1%
Dec 27
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable
Affected: 3.8
Showing 5