Advisories · Technology
JeecgBoot.
Every CVE that names JeecgBoot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass
- JeecgBoot
- SQL injection
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo
- JeecgBoot
- Broken access control
- CVSS 8.6 High
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById
- JeecgBoot
- Broken access control
- CVSS 7.1 High
JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel
- JeecgBoot
- Broken access control
- CVSS 5.3 Medium
JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel
- JeecgBoot
- Broken access control