Jeecg Boot SQL Injection

严重 9.8CVE-2023-41543 · GHSA-fr29-w6j4-525f · Published 30/12/2023 · updated 17/06/2026

要点

CVE-2023-41543 是影响 org.jeecgframework.boot:jeecg-boot-common, jeecg boot (jeecg) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.93%，高于 60.6% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
org.jeecgframework.boot:jeecg-boot-common Maven	`≤ 3.5.3`	No fix yet
jeecg boot jeecg	`≤ 3.5.3`	No fix yet

Description

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

NVD description

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

References

nvd.nist.gov/vuln/detail/CVE-2023-41543 · ADVISORY
jeecgboot/jeecg-boot · PACKAGE
mp.weixin.qq.com/s/q6R-kaN4XS5d_cgWtq46vw · WEB
pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29 · WEB
pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29 · Exploit

org.jeecgframework.boot:jeecg-boot-common 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jeecgframework.boot:jeecg-boot-common

Maven

≤ 3.5.3

No fix yet

jeecg boot

jeecg

≤ 3.5.3

No fix yet

Description

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

NVD description

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

org.jeecgframework.boot:jeecg-boot-common 的其他漏洞

查看全部 →