Description

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

Remediation

References

https://github.com/jeecgboot/jeecg-boot/issues/4976

Related Vulnerabilities

CVE-2022-22881 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base

CVE-2023-50728 Vulnerability in npm package @octokit/webhooks

CVE-2022-45064 Vulnerability in maven package org.apache.sling:org.apache.sling.engine

CVE-2022-23221 Vulnerability in maven package com.h2database:h2

CVE-2022-43441 Vulnerability in npm package sqlite3

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Vendor Advisory