CVE-2026-3672 in JeecgBoot情報

要約

〜によって MITRE • 2026年03月08日

A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

VulDB

公開

2026年03月08日

モデレーション

承諾済み

エントリ

VDB-349569

CPE

準備完了

CWE

CWE-89 (確認済み)

エクスプロイト

ダウンロード

CVSS

6.3 (CNA)

EPSS

0.00039

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-3672
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-3672
CVE Details	https://www.cvedetails.com/cve/CVE-2026-3672/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!