Vulnerabilities (CVE)

Filtered by vendor Jeecg Subscribe
Filtered by product Jeecg
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-24789 1 Jeecg 1 Jeecg 2024-02-04 N/A 8.8 HIGH
jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.
CVE-2020-20948 1 Jeecg 1 Jeecg 2024-02-04 5.0 MEDIUM 7.5 HIGH
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.