CVE-2024-57606: Guojusoft Jeecgboot

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

Affected products

• Guojusoft Jeecgboot: version 3.7.2 only

Published 2025-02-07. Last modified 2026-06-17.