GitHub Advisoryadvisory · Maven

GHSA-784x-7w88-w564 JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode

MEDIUM Published 2023-06-19 Modified 2023-06-19 Official page ↗
Aliases
CVE-2023-34602
Ecosystem
Maven
Packages
org.jeecgframework.boot:jeecg-boot-parent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-89
Reviewed
2023-06-19

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-parent: < 3.5.1 → fixed in 3.5.1

Description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component `queryTableDictItemsByCode` in method `org.jeecg.modules.api.controller.SystemApiController`.

Related

Alias · CVE (1)

  • CVE-2023-34602 JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References