Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-24789 | 1 Jeecg | 1 Jeecg | 2024-02-04 | N/A | 8.8 HIGH |
jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component. | |||||
CVE-2020-20948 | 1 Jeecg | 1 Jeecg | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. |