CVE-2023-38905: Jeecg Boot

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.

Affected products

• Jeecg Jeecg Boot: up to and including 3.5.0

Published 2023-08-17. Last modified 2026-06-17.