Vulnerabilities (CVE)

Filtered by vendor Jeecg Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-46089 1 Jeecg 1 Jeecg Boot 2024-02-04 10.0 HIGH 9.8 CRITICAL
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
CVE-2020-20948 1 Jeecg 1 Jeecg 2024-02-04 5.0 MEDIUM 7.5 HIGH
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
CVE-2020-28087 1 Jeecg 1 Jeecg Boot 2024-02-04 5.0 MEDIUM 7.5 HIGH
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.
CVE-2020-28088 1 Jeecg 1 Jeecg Boot 2024-02-04 7.5 HIGH 9.8 CRITICAL
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.