CVE-2026-124554 JeecgBoot JimuBI getAllChartData sql injection

A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation of the argument params results in sql injection. Remote exploitation of the attack is possible. T...

CVE-2026-124554

A SQL injection vulnerability exists in JeecgBoot 3.9.5 within the JimuBI component. The flaw is located in the /jeecg-boot/drag/onlDragDatasetHead/getAllChartData file, where manipulating the params argument allows for unauthorized database interaction. Remote exploitation is possible, and the e...

CVE-2026-124554: n/a JeecgBoot: A security flaw has been discovered in JeecgBoot 3.9.5

A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation of the argument params results in sql injection. Remote exploitation of the attack is possible. T...