GuojusoftCVEs & Vulnerabilities
3 CVEs affecting Guojusoft products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
jeecgboot 2jeecg 1
CVE-2025-51825MEDIUM
JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.
22 Aug 2025
6.5
CVSS
CVE-2024-57606HIGH
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.
8 Feb 2025
7.5
CVSS
CVE-2020-23083CRITICAL
Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".
4 May 2021
9.8
CVSS
← PrevPage 1 / 1Next →