CVE-2022-22881: Jeecg Boot

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

Affected products

• Jeecg Jeecg Boot: up to and including 3.0

Published 2022-02-16. Last modified 2026-06-17.