Product
Jeecg-Boot version 3.5.0 contains an unauthenticated SQL injection vulnerability in the /jmreport/qurestSql endpoint, enabling remote attackers to execute error-based SQL queries and disclose sensitive database information.