Vulnerabilities (CVE)

Filtered by vendor Jeecg Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-20948 1 Jeecg 1 Jeecg 2022-01-07 5.0 MEDIUM 7.5 HIGH
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
CVE-2020-28087 1 Jeecg 1 Jeecg Boot 2021-08-14 5.0 MEDIUM 7.5 HIGH
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.