JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo

高危 7.5CVE-2023-34603 · GHSA-cvgc-465m-cw9g · Published 19/06/2023 · updated 17/06/2026

要点

CVE-2023-34603 是影响 org.jeecgframework.boot:jeecg-boot-parent, jeecgboot (jeecg) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.69%，高于 52.9% 的漏洞。
修复：升级到 3.5.1 或更高版本。

Package	Affected versions	Patched versions
org.jeecgframework.boot:jeecg-boot-parent Maven	`< 3.5.1`	`3.5.1`
jeecgboot jeecg	`≤ 3.5.1`	No fix yet

Description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo in method org.jeecg.modules.api.controller.SystemApiController.

NVD description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.

References

nvd.nist.gov/vuln/detail/CVE-2023-34603 · ADVISORY
jeecgboot/jeecg-boot · WEB
jeecgboot/jeecg-boot · PACKAGE

org.jeecgframework.boot:jeecg-boot-parent 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jeecgframework.boot:jeecg-boot-parent

Maven

< 3.5.1

3.5.1

jeecgboot

jeecg

≤ 3.5.1

No fix yet

Description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo in method org.jeecg.modules.api.controller.SystemApiController.

NVD description

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.

org.jeecgframework.boot:jeecg-boot-parent 的其他漏洞

查看全部 →