GitHub Advisoryadvisory · Maven

GHSA-cvgc-465m-cw9g JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo

MEDIUM Published 2023-06-19 Modified 2023-06-19 Official page ↗
Aliases
CVE-2023-34603
Ecosystem
Maven
Packages
org.jeecgframework.boot:jeecg-boot-parent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-89
Reviewed
2023-06-19

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-parent: < 3.5.1 → fixed in 3.5.1

Description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component `queryFilterTableDictInfo` in method `org.jeecg.modules.api.controller.SystemApiController`.

Related

Alias · CVE (1)

  • CVE-2023-34603 JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References