Issues · jeecgboot/JeecgBoot · GitHub

入门必看
#203 · zhangdaiscott opened on Jun 12, 2019
issue格式
#7933 · zhangdaiscott opened on Mar 7, 2025
1
需求汇总
#1312 · zhangdaiscott opened on Jun 7, 2020
30

Labels Milestones New issue

[Security] SQL Injection via Bypassed keyword Parameter in /sys/dict/loadDict/{dictCode}

#9525

· YLChen-007 opened

on Apr 6, 2026

[Security] SQL Injection Protection Bypass via Regex Space Evasion and Case Sensitivity Flaw in /sys/dict/loadDict/{dictCode}

#9524

· YLChen-007 opened

on Apr 6, 2026

[Security] Denial of Service and Blind SQL Injection via Incomplete Filter in /sys/dict/getDictItems (CVE-2023-38905 Bypass)

#9523

· YLChen-007 opened

on Apr 6, 2026

[Security] SQL Injection Vulnerability in /sys/dict/loadDict via keyword Parameter Allows Information Disclosure

#9522

· YLChen-007 opened

on Apr 6, 2026

[Security] Stored Cross-Site Scripting (XSS) via Unsanitized Announcement msgContent Field

#9521

· YLChen-007 opened

on Apr 6, 2026

[Security] Time-Based SQL Injection in sys/dict/loadTreeData via condition JSON Parameter

#9520

· YLChen-007 opened

on Apr 6, 2026

[Security] Path Traversal via AI Chat File Attachment in AiragChatServiceImpl allows Arbitrary Local File Read

#9519

· YLChen-007 opened

on Apr 6, 2026

[Security] Authentication Logic Bypass via Unverified Token Parameter allowing Data Leakage in SysUserController

#9518

· YLChen-007 opened

on Apr 6, 2026

[Security] Unauthenticated Denial of Service (Account Logout) via Insecure JWT Parsing in /sys/logout

#9517

· YLChen-007 opened

on Apr 6, 2026

3.6.1前端在linux上编译后运行报错

#9515

· zhongw opened

on Apr 4, 2026

弹窗扩展自适应高度bug解决办法

#9511

· yidao2000 opened

on Apr 2, 2026

The absence of access control in the OssFileController leads to any authenticated user being able to delete OSS files.

#9509

· xxdppyy opened

on Mar 31, 2026