CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

CVE-2021-37305: Incorrect Permission Assignment for Critical Resource

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

CVE-2021-37306: Incorrect Permission Assignment for Critical Resource

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

jeecg 安全漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot version 2.4.5, which stems from an insecure permission setting. An attacker exploits the vulnerability to gain escalated privileges and view sensitive...

CVE-2021-37304: Incorrect Permission Assignment for Critical Resource

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

PT-2023-12305

Name of the Vulnerable Software and Affected Versions jeecg-boot version 2.4.5 Description The issue allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the "httptrace interface". Recommendations For jeecg-boot version 2.4.5, consider restricting...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

PT-2023-12306 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot versions 2.4.5 and earlier Description: The issue allows remote attackers to gain escalated privilege and view sensitive information. This is achieved via the API endpoint "/sys/user/querySysUser" with the username variable set to...

CVE-2021-37305

CVE-2021-37305 affects jeecg-boot up to version 2.4.5. The issue is an insecure permissions flaw in the API endpoint /sys/user/querySysUser?username=admin, allowing remote attackers to gain escalated privileges and view sensitive information (e.g., email, phone, usernames). Reports from multiple ...

CVE-2021-37306

CVE-2021-37306 affects jeecg-boot up to version 2.4.5 and earlier, where insecure permissions allow remote attackers to gain escalated privileges and view sensitive information via the API endpoint /sys/user/checkOnlyUser?username=admin. The vulnerability is documented with a HIGH impact (CVSS v3...

CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

PT-2023-12307 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot versions 2.4.5 and earlier Description: The issue allows remote attackers to gain escalated privilege and view sensitive information. This is achieved via the "api uri:/sys/user/checkOnlyUser?username=admin" endpoint, where the...

SQL Injection

jeecg-boot-base-core is vulnerable to SQL Injection. The vulnerability exists because the library does not properly escape special characters, allowing an attacker to inject and execute malicious SQL queries...

Jeecg-boot is vulnerable to SQL injection

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. A patch was released in commit 0fc374...

GHSA-6W89-C65W-JX2C Jeecg-boot is vulnerable to SQL injection

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData. A patch was released in commit 0fc374...

CVE-2022-47105

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...

Sql injection

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...

CVE-2022-47105

Jeecg-boot v3.4.4 contains a SQL injection vulnerability in the /sys/dict/queryTableData component. The issue, described across multiple sources, stems from improper handling of input leading to arbitrary SQL execution. CVSS 3.1 vector indicates high impact to confidentiality, integrity, and avai...

CVE-2022-47105

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...

Jeecg-boot SQL注入漏洞

Jeecg-Boot is a code generator-based low-code platform from the JeecgBoot community. A security vulnerability exists in Jeecg-boot v3.4.4, which stems from Jeecg-boot v3.4.4 was found to contain a SQL injection vulnerability via component /sys/dict/queryTableData...