Description

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

Remediation

References

https://github.com/jeecgboot/jeecg-boot/issues/5311

Related Vulnerabilities

CVE-2015-8858 Vulnerability in npm package uglify-js

CVE-2023-1370 Vulnerability in maven package net.minidev:json-smart

CVE-2020-28478 Vulnerability in npm package gsap

CVE-2020-7691 Vulnerability in maven package org.webjars.npm:jspdf

CVE-2020-26256 Vulnerability in maven package org.webjars.npm:fast-csv

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking