| Package | Affected versions | Patched versions |
|---|---|---|
| org.jeecgframework.boot:jeecg-boot-common | < 3.6.0 | 3.6.0 |
| jeecg boot | = 3.0= 3.5.3 |
SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free