CVE-2025-61189

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the we...

CVE-2024-57606

The JeecgBoot low-code platform, specifically version v.3.7.2 developed by Beijing Guoju Information Technology Co., Ltd, is vulnerable to an SQL injection flaw. This vulnerability exists within the getTotalData component, which can be exploited by a remote attacker to obtain sensitive informatio...