Org.jeecgframework.boot:jeecg-boot-parent

This hub aggregates every CVE we track for Org.jeecgframework.boot:jeecg-boot-parent, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Org.jeecgframework.boot:jeecg-boot-parent.

• CVE-2024-48307JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.9.8Oct 31, 2024
• CVE-2023-41578Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.7.5Sep 8, 2023
• CVE-2023-42268Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.9.8Sep 8, 2023
• CVE-2023-38905SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIV...5.5Aug 17, 2023
• CVE-2023-34603JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.7.5Jun 19, 2023
• CVE-2023-34602JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.7.5Jun 19, 2023
• CVE-2023-34660jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.6.5Jun 16, 2023
• CVE-2023-34659jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.9.8Jun 16, 2023
• CVE-2023-1784jeecg-boot API Documentation improper authentication5.3Mar 31, 2023
• CVE-2023-1741jeecg-boot Sleep Command SysDictMapper.java sql injection4.3Mar 30, 2023
• CVE-2023-24789jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.8.8Mar 6, 2023
• CVE-2020-28088An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.9.8Aug 6, 2021