PatchTheCVEguojusoft vulnerabilities
Recent CVEs affecting guojusoft products. 2 tracked.
guojusoft has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-08-22. Highest priority: CVE-2024-57606 (score 48/100).
- CVE-2025-51825 MEDIUM 6.5 UPGRADE JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-bo
- CVE-2024-57606 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote
FAQ
How do I fix guojusoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is guojusoft being exploited right now?
None of the tracked guojusoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which guojusoft CVE should I patch first?
CVE-2024-57606 currently ranks highest (48/100): SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote.