GitHub Advisoryadvisory · Maven

GHSA-wfpm-qchc-6cf9 SQL injection in JeecgBoot

HIGH Published 2025-02-08 Modified 2025-02-10 Official page ↗
Aliases
CVE-2024-57606
Ecosystem
Maven
Packages
org.jeecgframework.boot:jeecg-boot-common
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200, CWE-89
Reviewed
2025-02-10

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-common: < 3.7.3 → fixed in 3.7.3

Description

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

Related

Alias · CVE (1)

  • CVE-2024-57606 SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive… vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References