CVE-2025-51825

The JeecgBoot Java low-code platform, specifically versions 3.4.3 through 3.8.0 , is vulnerable to a SQL injection vulnerability (CWE-89) in the /jeecg-boot/online/cgreport/head/parseSql endpoint. The root cause is the improper handling of SQL queries, which allows an attacker to bypass SQL black...