Jeecg-boot vulnerable to SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-45210 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• jeecgboot/jeecg-boot commit 51e2227 · WEB
• jeecgboot/jeecg-boot-starter · PACKAGE
• jeecg-boot.com · WEB

org.jeecgframework.boot:jeecg-module-system のその他の脆弱性

• CVE-2022-47105緊急 9.8Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
• CVE-2022-45208中 4.3Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
• CVE-2022-45207緊急 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
• CVE-2022-45206緊急 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.