3.5.3

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-30	CVE-2023-41544	Code Injection vulnerability in Jeecg Boot SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component. network low complexity jeecg CWE-94 critical	9.8
2023-12-30	CVE-2023-41542	SQL Injection vulnerability in Jeecg Boot SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component. network low complexity jeecg CWE-89 critical	9.8
2023-12-30	CVE-2023-41543	SQL Injection vulnerability in Jeecg Boot SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check. network low complexity jeecg CWE-89 critical	9.8
2023-09-22	CVE-2023-40989	SQL Injection vulnerability in Jeecg Boot 3.0/3.5.3 SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component. network low complexity jeecg CWE-89 critical	9.8
2023-09-08	CVE-2023-41578	Unspecified vulnerability in Jeecg Boot Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. network low complexity jeecg	7.5
2023-09-08	CVE-2023-42268	SQL Injection vulnerability in Jeecg Boot Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. network low complexity jeecg CWE-89 critical	9.8