GHSA-23xf-5535-62v5
jeecg-boot vulnerable to SQL injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jeecgframework.boot:jeecg-boot-parent | <= 3.5.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
jeecg-boot 3.5.0 is vulnerable to SQL injection from functionality of the file `SysDictMapper.java` of the component `Sleep Command Handler`. The attack can be launched remotely and the exploit has been disclosed to the public and may be used.
References
External links from the advisory. They lead to third-party sites.