CVE-2024-57606

The JeecgBoot low-code platform (version v.3.7.2 ) is vulnerable to a SQL injection vulnerability in the getTotalData component, specifically within the org.jeecgframework.boot:jeecg-boot-base-core package. The root cause is improper input validation , which allows a remote attacker to inject mal...

CVE-2025-51825

The JeecgBoot Java low-code platform, specifically versions 3.4.3 through 3.8.0 , is vulnerable to a SQL injection vulnerability (CWE-89) in the /jeecg-boot/online/cgreport/head/parseSql endpoint. The root cause is the improper handling of SQL queries, which allows an attacker to bypass SQL black...