Jeecg: Security Vulnerabilities
Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-01-19
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-11-25
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-11-25
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-11-25
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
CVSS Score
4.3
EPSS Score
0.002
Published
2022-11-25
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.
CVSS Score
4.3
EPSS Score
0.002
Published
2022-11-25
A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability.
CVSS Score
7.3
EPSS Score
0.003
Published
2022-08-04
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
CVSS Score
6.1
EPSS Score
0.003
Published
2022-03-10
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-02-16
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-02-16