Cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*

Jeecg-Boot version 3.5.0 contains an unauthenticated SQL injection vulnerability in the /jmreport/qurestSql endpoint, enabling remote attackers to execute error-based SQL queries and disclose sensitive database information.