CVE-2026-3672

Publication date

2026-03-07 21:32:13

Family

VulDB

State

PUBLISHED

Description

A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.