JeecgBoot SQL Injection vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-48307 · ADVISORY
• jeecgboot/JeecgBoot · WEB
• github.com/jeecgboot · WEB
• jeecgboot/JeecgBoot · PACKAGE

org.jeecgframework.boot:jeecg-boot-parent のその他の脆弱性

• CVE-2023-42268緊急 9.8Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
• CVE-2023-41578高 7.5Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
• CVE-2023-38905中 5.5SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Slee…
• CVE-2023-34603高 7.5JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modu…
• CVE-2023-34602高 7.5JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.mod…