Guojusoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Guojusoft records in CISA KEV

No Guojusoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jeecgboot 2 records HIGH Jeecg 1 record MEDIUM

Records

3 records

TI-2024-37960 CVE-2024-57606 · GHSA-wfpm-qchc-6cf9

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot…

HIGH 72

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-02-07 Fixed in 3.7.3 CWE-89

TI-2020-14457 CVE-2020-23083 · GHSA-97x4-c736-8m6j

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute…

MEDIUM 48

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03659 Published 2021-05-03 No fix listed CWE-434

TI-2025-32421 CVE-2025-51825 · GHSA-gj8w-ffq9-6828

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection…

LOW 36

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00241 Published 2025-08-22 Fixed in 3.8.1 CWE-89

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0