CVE-2024-48307

CRITICAL EXPLOITED NUCLEI

Jeecg Boot - SQL Injection

Title source: rule

Description

JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.

Exploits (2)

github WORKING POC 40 stars
by iSee857 · pythonpoc
https://github.com/iSee857/CVE-PoC/tree/main/JeecgBoot(CVE-2024-48307).py
nomisec WORKING POC 1 stars
by jisi-001 · infoleak
https://github.com/jisi-001/CVE-2024-48307POC

Nuclei Templates (1)

JeecgBoot v3.7.1 - SQL Injection
CRITICALby lbb,s4e-io
Shodan: http.favicon.hash:"1380908726"
FOFA: icon_hash="-250963920" || icon_hash=1380908726 || title="jeecg-boot"

References (3)

Scores

CVSS v3 9.8
EPSS 0.9221
EPSS Percentile 99.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-12-24
CWE
CWE-89
Status published
Products (2)
jeecg/jeecg_boot 3.7.1
org.jeecgframework.boot/jeecg-boot-parent 0Maven
Published Oct 31, 2024
Tracked Since Feb 18, 2026