Advisories · Technology
JeecgBoot.
Every CVE that names JeecgBoot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 5.3 Medium
JeecgBoot SysAnnouncementController improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication
- JeecgBoot
- Authentication bypass
- CVSS 5.3 Medium
JeecgBoot getDictItems isExistSqlInjectKeyword sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 5.3 Medium
JeecgBoot uploadImgByHttp server-side request forgery
- JeecgBoot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
JeecgBoot Backend airag_app,1,create_by sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 2.3 Low
JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization
- JeecgBoot
- Insecure deserialization
- CWE-20
- CVSS 5.3 Medium
JeecgBoot Retrieval-Augmented Generation edit path traversal
- JeecgBoot
- Path traversal
- CVSS 5.3 Medium
JeecgBoot Online Report API loadDictItemByKeyword sql injection
- JeecgBoot
- Other injection
- SQL injection
- CVSS 2.3 Low
JeecgBoot getPositionUserList improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot queryDepartPermission improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot list getParameterMap improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot datarule improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot datarule loadDatarule improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 4.8 Medium
JeecgBoot getDeptRoleByUserId information disclosure
- JeecgBoot
- Information disclosure
- Broken access control
- CVSS 2.3 Low
JeecgBoot getDeptRoleList improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot list queryPageList improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot SysUserOnlineController.java SysUserOnlineController user session
- JeecgBoot
- CWE-1018
- CVSS 5.3 Medium
JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication
- JeecgBoot
- Authentication bypass
- CVSS 5.3 Medium
JeecgBoot exportXls improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot exportXls improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot exportXls improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot Filter exportXls improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot deleteBatch improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
JeecgBoot getDepartUserList improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot sendMsg improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot Tenant Log Export exportLog improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
JeecgBoot WebSocket Message sendWebSocketMsg improper authorization
- JeecgBoot
- Privilege escalation
- Broken access control
- CVSS 5.1 Medium
JeecgBoot Document Library Upload zip unzipFile resource consumption
- JeecgBoot
- Denial of service