CVE-2024-57606

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

Published: Feb 8, 2025
Updated: Aug 11, 2025
CVE: CVE-2024-57606
GHSA: GHSA-wfpm-qchc-6cf9
Severity: High
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

CWE-200
CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
org.jeecgframework.boot / jeecg-boot-common	-	3.7.3

https://github.com/jeecgboot/JeecgBoot/issues/7665

Vulnerability Database

CVE-2024-57606