~ / search / GHSA-25gv-mvm7-5h3h

GHSA-25gv-mvm7-5h3h

Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-45208

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-module-system < 3.4.4 3.4.4

Details

As written in the advisory (Markdown source, shown as plain text).

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.

References

External links from the advisory. They lead to third-party sites.