Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-45207 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• jeecgboot/jeecg-boot commit 8632a83 · WEB
• jeecgboot/jeecg-boot commit 958cf01 · WEB
• jeecgboot/jeecg-boot · PACKAGE
• jeecg-boot.com · WEB

Autres vulnérabilités de org.jeecgframework.boot:jeecg-module-system

• CVE-2022-47105CRITIQUE 9.8Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
• CVE-2022-45210MOYENNE 4.3Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.
• CVE-2022-45208MOYENNE 4.3Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
• CVE-2022-45206CRITIQUE 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.