CVE-2020-28087

HIGH

jeecg-boot 2.3 - SQL Injection via /sys/dict/loadtreedata

Title source: llm

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0155

EPSS Percentile 72.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-89

Status published

Products (1)

jeecg/jeecg_boot 2.3

Published Aug 06, 2021

Tracked Since Feb 18, 2026