CVE-2026-108684 | erzhongxmu Jeewms up to 3.7 Autocomplete Data JeecgFormDemoController.java getTreeData searchVal sql injection (GHSA-mc7c-w398-v7xp)

SecurityVulns
Yanac

A vulnerability has been found in erzhongxmu Jeewms up to 3.7 and classified as critical. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql injection.

This vulnerability is identified as CVE-2026-108684. The attack can be initiated remotely. There is not any exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More