Vulnerabilities > Jeecg
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-03 | CVE-2021-37304 | Incorrect Permission Assignment for Critical Resource vulnerability in Jeecg An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface. | 7.5 |
| 2023-02-03 | CVE-2021-37305 | Incorrect Permission Assignment for Critical Resource vulnerability in Jeecg An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin. | 7.5 |
| 2023-02-03 | CVE-2021-37306 | Incorrect Permission Assignment for Critical Resource vulnerability in Jeecg An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin. | 7.5 |
| 2023-01-19 | CVE-2022-47105 | SQL Injection vulnerability in Jeecg Boot 3.4.4 Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. | 9.8 |
| 2022-11-25 | CVE-2022-45205 | SQL Injection vulnerability in Jeecg Boot 3.4.3 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. | 5.3 |
| 2022-11-25 | CVE-2022-45206 | SQL Injection vulnerability in Jeecg Boot 3.4.3 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. | 9.8 |
| 2022-11-25 | CVE-2022-45207 | SQL Injection vulnerability in Jeecg Boot 3.4.3 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString. | 9.8 |
| 2022-11-25 | CVE-2022-45208 | SQL Injection vulnerability in Jeecg Boot 3.4.3 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin. | 4.3 |
| 2022-11-25 | CVE-2022-45210 | SQL Injection vulnerability in Jeecg Boot 3.4.3 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin. | 4.3 |
| 2022-03-10 | CVE-2021-44585 | Cross-site Scripting vulnerability in Jeecg Boot 3.0 A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. | 4.3 |