GitHub Advisoryadvisory · Maven

GHSA-gj8w-ffq9-6828 JeecgBoot SQL Injection Vulnerability

MEDIUM Published 2025-08-22 Modified 2025-08-22 Official page ↗
Aliases
CVE-2025-51825
Ecosystem
Maven
Packages
org.jeecgframework.boot:jeecg-boot-base-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-89
Reviewed
2025-08-22

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-base-core: >= 3.4.3, < 3.8.1 → fixed in 3.8.1

Description

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

Related

Alias · CVE (1)

  • CVE-2025-51825 JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References