Approved changes feed: RSS · Atom
cpe:2.3:a:jeecg:jeecg:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jeecg (fb64a702-a4ac-5a16-97d2-6b4b25df328f) |
|---|---|
| Product | Jeecg (ac8c823f-bd84-5590-937b-20edbdec5ae2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jeecgboot/jeecg |
purl2cpe | 2026-06-01 10:13:17.873015 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49442 |
vulnerable | 2026-06-08 06:14:29.105657 |
Details available
Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request.
Published: 2024-01-03T00:00:00.000Z
Updated: 2025-04-17T18:27:45.127Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37306 |
vulnerable | 2026-06-08 05:32:53.995488 |
Details available
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T18:30:04.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37305 |
vulnerable | 2026-06-08 05:32:53.995024 |
Details available
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T18:29:28.860Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37304 |
vulnerable | 2026-06-08 05:32:53.994510 |
Details available
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T16:12:05.789Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.