PatchTheCVEjeecgboot vulnerabilities and fixes
Recent CVEs affecting jeecgboot, with upgrade or downgrade steps. 2 tracked.
jeecgboot has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-08-22. Highest priority: CVE-2024-57606 (score 48/100).
- CVE-2025-51825 MEDIUM 6.5 UPGRADE JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-bo
- CVE-2024-57606 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote
FAQ
How do I fix jeecgboot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jeecgboot being exploited right now?
None of the tracked jeecgboot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jeecgboot CVE should I patch first?
CVE-2024-57606 currently ranks highest (48/100): SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote.