Description

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

Remediation

References

https://github.com/jeecgboot/jeecg-boot/issues/5311

Related Vulnerabilities

CVE-2017-18869 Vulnerability in maven package org.webjars.npm:chownr

CVE-2022-32114 Vulnerability in npm package @strapi/strapi

CVE-2023-45857 Vulnerability in maven package org.webjars.bowergithub.axios:axios

CVE-2015-5211 Vulnerability in maven package org.springframework:spring-web

CVE-2022-2564 Vulnerability in npm package mongoose

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking