3.5.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-30	CVE-2023-41544	Code Injection vulnerability in Jeecg Boot SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component. network low complexity jeecg CWE-94 critical	9.8
2023-12-30	CVE-2023-41542	SQL Injection vulnerability in Jeecg Boot SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component. network low complexity jeecg CWE-89 critical	9.8
2023-12-30	CVE-2023-41543	SQL Injection vulnerability in Jeecg Boot SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check. network low complexity jeecg CWE-89 critical	9.8
2023-09-08	CVE-2023-41578	Unspecified vulnerability in Jeecg Boot Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. network low complexity jeecg	7.5
2023-09-08	CVE-2023-42268	SQL Injection vulnerability in Jeecg Boot Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. network low complexity jeecg CWE-89 critical	9.8
2023-08-17	CVE-2023-38905	SQL Injection vulnerability in Jeecg Boot SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions. local low complexity jeecg CWE-89	5.5
2023-06-16	CVE-2023-34659	SQL Injection vulnerability in Jeecg Boot 3.5.0/3.5.1 jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. network low complexity jeecg CWE-89 critical	9.8
2023-06-16	CVE-2023-34660	Unrestricted Upload of File with Dangerous Type vulnerability in Jeecg Boot 3.5.0/3.5.1 jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. network low complexity jeecg CWE-434	6.5
2023-03-31	CVE-2023-1784	Improper Authentication vulnerability in Jeecg Boot 3.5.0 A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. network low complexity jeecg CWE-287 critical	9.8
2023-03-30	CVE-2023-1741	SQL Injection vulnerability in Jeecg Boot 3.5.0 A vulnerability was found in jeecg-boot 3.5.0. network low complexity jeecg CWE-89 critical	9.8