Description
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/5173
Related Vulnerabilities
CVE-2023-29526 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rendering-async-api
CVE-2020-7605 Vulnerability in npm package gulp-tape
CVE-2021-28164 Vulnerability in maven package org.eclipse.jetty:jetty-webapp
CVE-2024-36401 Vulnerability in maven package org.geoserver.web:gs-web-app
CVE-2020-21125 Vulnerability in maven package com.bstek.ureport:ureport2-console