← Back

Jeecgboot

jeecgboot

Vendor: Guojusoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-51825
1Guojusoft
1Jeecgboot
Jun 17, 2026
Aug 22, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.
CVE-2024-57606
1Guojusoft
1Jeecgboot
Jun 17, 2026
Feb 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.