SQL injection in jeecgboot

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-40989 · ADVISORY
• jeecgboot/jeecg-boot commit 473875a · WEB
• jeecgboot/jeecg-boot commit 56e81fb · WEB
• jeecgboot/jeecg-boot commit 87677df · WEB
• Zone1-Z/CVE-2023-40989 · WEB
• jeecgboot/jeecg-boot · PACKAGE

Autres vulnérabilités de org.jeecgframework.boot:jeecg-boot-common

• CVE-2024-57606ÉLEVÉE 7.5SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive …
• CVE-2023-41544CRITIQUE 9.8SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the …
• CVE-2023-41543CRITIQUE 9.8SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the co…
• CVE-2023-41542CRITIQUE 9.8SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via…
• CVE-2023-47467MOYENNE 6.5Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file dir…