Vulnerabilities

TI-2025-32421 CVE-2025-51825 · GHSA-gj8w-ffq9-6828

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection…

LOW 36

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00241 Published 2025-08-22 Fixed in 3.8.1 CWE-89

TI-2024-37960 CVE-2024-57606 · GHSA-wfpm-qchc-6cf9

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot…

HIGH 72

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-02-07 Fixed in 3.7.3 CWE-89

TI-2020-14457 CVE-2020-23083 · GHSA-97x4-c736-8m6j

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute…

MEDIUM 48

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03659 Published 2021-05-03 No fix listed CWE-434

Vulnerabilities

Filters

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection…

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot…

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute…