| Description: | | JeecgBoot is an open-source low-code development platform. JeecgBoot contains an authentication bypass vulnerability and a SQL injection vulnerability. These vulnerabilities arise from inadequate access control on certain interfaces and insufficient filtering and escaping of user input. An attacker can exploit these vulnerabilities to bypass authentication and access unauthorized functionality, or inject malicious SQL statements into the database to obtain or tamper with sensitive data, and even escalate privileges and take over the system, severely impacting the confidentiality, integrity, and availability of the target system. |