Jeecg-boot vulnerable to SQL Injection

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-45210 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• jeecgboot/jeecg-boot commit 51e2227 · WEB
• jeecgboot/jeecg-boot-starter · PACKAGE
• jeecg-boot.com · WEB

Weitere Schwachstellen in org.jeecgframework.boot:jeecg-module-system

• CVE-2022-47105KRITISCH 9.8Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
• CVE-2022-45208MITTEL 4.3Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
• CVE-2022-45207KRITISCH 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
• CVE-2022-45206KRITISCH 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.