| Package | Affected versions | Patched versions |
|---|---|---|
| org.jeecgframework.boot:jeecg-boot-parent | ≤ 3.5.0 | |
| jeecg boot | ≤ 3.5.0 |
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free