CVE-2024-57606

CVE-2024-57606 concerns a SQL injection in JeecgBoot v3.7.2 by Beijing Guoju Information Technology Co., Ltd. The vulnerability affects the getTotalData component and could allow a remote attacker to obtain sensitive information. Public documents identify the affected software as JeecgBoot 3.7.2,...

CVE-2025-51825

CVE-2025-51825 applies to JeecgBoot versions 3.4.3 through 3.8.0. A SQL injection vulnerability exists in the endpoint /jeecg-boot/online/cgreport/head/parseSql that allows bypassing SQL blacklist restrictions. The incident is documented across multiple feeds (NVD, Red Hat, GHSA, osv, etc.). Impa...