CVE-2025-61189

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the we...

CVE-2024-57606

CVE-2024-57606 concerns a SQL injection in JeecgBoot v3.7.2 by Beijing Guoju Information Technology Co., Ltd. The vulnerability affects the getTotalData component and could allow a remote attacker to obtain sensitive information. Public documents identify the affected software as JeecgBoot 3.7.2,...