Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-45208 · ADVISORY
• jeecgboot/jeecg-boot · WEB
• jeecgboot/jeecg-boot commit 51e2227 · WEB
• jeecgboot/jeecg-boot · PACKAGE
• jeecg-boot.com · WEB

Lỗ hổng khác của org.jeecgframework.boot:jeecg-module-system

• CVE-2022-47105NGHIÊM TRỌNG 9.8Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
• CVE-2022-45210TRUNG BÌNH 4.3Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.
• CVE-2022-45207NGHIÊM TRỌNG 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
• CVE-2022-45206NGHIÊM TRỌNG 9.8Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.