GHSA-6w89-c65w-jx2c

Jeecg-boot is vulnerable to SQL injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-47105

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.jeecgframework.boot:jeecg-boot-base-core	<= 3.4.4	no fix listed
Maven	org.jeecgframework.boot:jeecg-module-system	<= 3.4.4	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component `/sys/dict/queryTableData`. A patch was released in commit 0fc374.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-47105 advisory
https://github.com/jeecgboot/jeecg-boot/issues/4393 web
https://github.com/jeecgboot/jeecg-boot/commit/0fc374de4745eac52620eeb8caf6a7b76127529a web
https://github.com/jeecgboot/jeecg-boot package