Jeecg-boot SQL Injection vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-38905 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• gist.github.com/wealeson1/e24fc8575f4e051320d69e9a75080642 · WEB
• jeecgboot/jeecg-boot · PACKAGE

Mais vulnerabilidades de org.jeecgframework.boot:jeecg-boot-parent

• CVE-2024-48307CRÍTICO 9.8JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
• CVE-2023-42268CRÍTICO 9.8Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
• CVE-2023-41578ALTO 7.5Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
• CVE-2023-34603ALTO 7.5JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modu…
• CVE-2023-34602ALTO 7.5JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.mod…