CVE-2023-34602

CVSS v3.1 7.5 (High)

EPSS 0.12 % (47^th)

Affected Products 1

Advisories 1

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.

Weaknesses

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2023-06-19 06:15:09
(15 months ago)
Updated Date: 2023-06-27 09:00:22
(14 months ago)

Affected Products

Jeecg

Jeecgboot

Configuration #1

		CPE23	From	Up To
	Jeecgboot 3.5.1 and prior versions	cpe:2.3:a:jeecg:jeecgboot		<= 3.5.1