Vulnerability details
CVE-2026-112017
jeecgboot JeecgBoot
JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass
CVSS 4.0
7.1High
Official description
JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like /sys/dict/getDictItems for boolean or time-based blind injection, extracting database contents including administrator password hashes from sys_user.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.1High | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 6.5Medium | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| jeecgboot | JeecgBoot | v < 3.9.5 | CVEProject cvelistV5 (CNA) |
References and advisories
6- https://github.com/jeecgboot/JeecgBoot/issues/9677 issue-tracking
- https://github.com/jeecgboot/JeecgBoot/blob/v3.9.2/jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java#L269-L305 technical-description
- https://github.com/jeecgboot/JeecgBoot/commit/a2be896f753936956ee6863b632b8e5a0231345c patch
- https://github.com/jeecgboot/JeecgBoot/releases/tag/v3.9.5 release-notes
- https://github.com/jeecgboot/JeecgBoot product
- https://www.vulncheck.com/advisories/jeecgboot-before-3.9.5-sql-injection-via-sqlinjectionutil-newline-bypass third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-18
- Last updated
- 2026-10-19
- State
- Published
- Assigner (CNA)
- VulnCheck
Exploit prediction (EPSS)
0.28%
Probability of exploitation in 30 days
20.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')