Browse CVEs

CRITICAL 9.8 CVE-2023-41543 SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /… Jeecg Boot after 3.5.3 Fix from $2,3002023-12-30 CRITICAL 9.8 CVE-2023-6307 A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of t… Jimureport after 1.6.1 Fix from $2,3002023-11-27 MEDIUM 6.5 CVE-2023-47467 Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory st… Jeecg Boot Mitigation only Fix from $1,6002023-11-22 CRITICAL 9.8 CVE-2023-40989 SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the … Jeecg Boot Mitigation only Fix from $2,3002023-09-22 CRITICAL 9.8 CVE-2023-42268 Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. Jeecg Boot after 3.5.3 Fix from $2,3002023-09-08 HIGH 7.5 CVE-2023-41578 Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. Jeecg Boot after 3.5.3 Fix from $1,9502023-09-08 CRITICAL 9.8 CVE-2023-4450EPSS 11% A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… Jimureport 1.6.1+ Fix from $2,3002023-08-21 MEDIUM 5.5 CVE-2023-38905 SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_L… Jeecg Boot after 3.5.0 Fix from $1,6002023-08-17 CRITICAL 9.8 CVE-2023-38992EPSS 74% jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData. Jeecg Boot Patch available Fix from $2,3002023-07-28 HIGH 7.5 CVE-2023-34602 JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.… Jeecgboot after 3.5.1 Fix from $1,9502023-06-19 HIGH 7.5 CVE-2023-34603 JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.c… Jeecgboot after 3.5.1 Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2023-34659EPSS 12% jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. Jeecg Boot No fix yet Fix from $2,3002023-06-16 MEDIUM 6.5 CVE-2023-34660 jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. Jeecg Boot No fix yet Fix from $1,6002023-06-16 CRITICAL 9.8 CVE-2023-1784 A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentati… Jeecg Boot Mitigation only Fix from $2,3002023-03-31 CRITICAL 9.8 CVE-2023-1741 A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the… Jeecg Boot Mitigation only Fix from $2,3002023-03-30 CRITICAL 9.8 CVE-2023-1454EPSS 36% A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulat… Jeecg Boot No fix yet Fix from $2,3002023-03-17 HIGH 8.8 CVE-2023-24789 jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component. Jeecg No fix yet Fix from $1,9502023-03-06 HIGH 7.5 CVE-2021-37304 An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information … Jeecg after 2.4.5 Fix from $1,9502023-02-03 HIGH 7.5 CVE-2021-37305 An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via … Jeecg after 2.4.5 Fix from $1,9502023-02-03 HIGH 7.5 CVE-2021-37306 An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via … Jeecg after 2.4.5 Fix from $1,9502023-02-03 CRITICAL 9.8 CVE-2022-47105 Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. Jeecg Boot Patch available Fix from $2,3002023-01-19 CRITICAL 9.8 CVE-2022-45206 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. Jeecg Boot Mitigation only Fix from $2,3002022-11-25 CRITICAL 9.8 CVE-2022-45207 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString. Jeecg Boot Mitigation only Fix from $2,3002022-11-25 MEDIUM 5.3 CVE-2022-45205 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. Jeecg Boot No fix yet Fix from $1,6002022-11-25 CRITICAL 9.8 CVE-2022-2647 A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulatio… Jeecg Boot Mitigation only Fix from $2,3002022-08-04 MEDIUM 6.1 CVE-2021-44585 A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. Jeecg Boot No fix yet Fix from $1,6002022-03-10 CRITICAL 9.8 CVE-2022-22880 Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId. Jeecg Boot after 3.0 Fix from $2,3002022-02-16 CRITICAL 9.8 CVE-2022-22881 Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData. Jeecg Boot after 3.0 Fix from $2,3002022-02-16 CRITICAL 9.8 CVE-2021-46089 In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. Jeecg Boot No fix yet Fix from $2,3002022-01-25 HIGH 7.5 CVE-2020-20948 An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. Jeecg No fix yet Fix from $1,9502021-12-27