CVE-2025-61189

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the we...

CVE-2024-57606

The JeecgBoot low-code platform (version v.3.7.2 ) is vulnerable to a SQL injection vulnerability in the getTotalData component, specifically within the org.jeecgframework.boot:jeecg-boot-base-core package. The root cause is improper input validation , which allows a remote attacker to inject mal...