Jeecg: Security Vulnerabilities
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
CVSS Score
9.8
EPSS Score
0.008
Published
2022-01-25
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
CVSS Score
7.5
EPSS Score
0.005
Published
2021-12-27
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.059
Published
2021-08-06
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.
CVSS Score
7.5
EPSS Score
0.007
Published
2021-08-06
Page 5