Vulnerabilidades en jeecgboot
113 resultadosCVE-2023-4450MEDIUMjeecgboot JimuReport Template injectionEPSS 11.6%CVE-2023-6307MEDIUMjeecgboot JimuReport image path traversalEPSS 0.8%CVE-2026-58375HIGHJimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/exportEPSS 0.6%CVE-2025-10771MEDIUMjeecgboot JimuReport DB2 JDBC testConnection deserializationEPSS 0.6%CVE-2025-8963MEDIUMjeecgboot JimuReport Data Large Screen Template testConnection deserializationEPSS 0.6%CVE-2026-75479HIGHJimuReport Unauthenticated Report Listing and Share Token DisclosureEPSS 0.5%CVE-2025-12626MEDIUMjeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversalEPSS 0.5%CVE-2025-10770MEDIUMjeecgboot JimuReport MySQL JDBC testConnection deserializationEPSS 0.4%CVE-2026-82629MEDIUMjeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted uploadEPSS 0.4%CVE-2026-58377HIGHJeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret KeysEPSS 0.4%CVE-2026-5848MEDIUMjeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injectionEPSS 0.3%CVE-2026-108623HIGHJeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatchEPSS 0.3%CVE-2026-108648HIGHJeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode EndpointEPSS 0.3%CVE-2026-108639MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}EPSS 0.3%CVE-2026-112017HIGHJeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline BypassEPSS 0.3%CVE-2026-108671HIGHJeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryByIdEPSS 0.3%CVE-2026-10241MEDIUMjeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgeryEPSS 0.3%CVE-2026-108631MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/deleteEPSS 0.3%CVE-2026-108619MEDIUMJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch EndpointEPSS 0.3%CVE-2026-108613MEDIUMJeecgBoot through 3.9.5 Missing Authorization via /airag/app/release EndpointEPSS 0.3%