Description
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3348
Related Vulnerabilities
CVE-2018-3749 Vulnerability in maven package org.webjars.npm:deap
CVE-2017-18869 Vulnerability in maven package org.webjars.npm:chownr
CVE-2023-46653 Vulnerability in maven package org.jenkins-ci.plugins:lambdatest-automation
CVE-2023-44487 Vulnerability in maven package io.netty:netty-codec-http2
CVE-2023-45277 Vulnerability in maven package org.yamcs:yamcs-core