6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-51825

CVE-2025-51825: JeecgBoot SQL Injection Vulnerability

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-51825

CVE-2025-51825:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.jeecgframework.boot:jeecg-boot-base-core	maven	>= 3.4.3, < 3.8.1	3.8.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a SQL injection that allows bypassing a blacklist in JeecgBoot. The root cause was the failure of the application's security controls to properly parse and inspect the database schema name within SQL queries. This allowed attackers to craft queries targeting sensitive schemas like information_schema and performance_schema, which the existing filters did not detect.

The patch addresses this issue in two key areas:

SqlInjectionUtil.java: The methods specialFilterContentForOnlineReport and specialFilterContentForDictSql, which are responsible for sanitizing SQL input, were updated. They now explicitly check for and block the usage of the blacklisted schemas. The absence of this check was the primary vulnerability. During an exploit of the /online/cgreport/head/parseSql endpoint, the specialFilterContentForOnlineReport function would be in the call stack, making it a key runtime indicator.
AbstractQueryBlackListHandler.java: The isPass method, which validates queries against a blacklist, was enhanced. The patch updated the underlying SQL parsing library (minidao) and modified isPass to extract and check the database name from the query. Before this fix, the handler was blind to the specific schema being queried, creating a security hole.

By identifying these specific functions, security teams can set up targeted monitoring and profiling to detect exploit attempts. Any invocation of these functions with SQL queries referencing information_schema or performance_schema in vulnerable versions of JeecgBoot should be considered a strong indicator of compromise.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.