GHSA-fr29-w6j4-525f

Jeecg Boot SQL Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-41543

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.jeecgframework.boot:jeecg-boot-common	<= 3.5.3	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-41543 advisory
https://github.com/jeecgboot/jeecg-boot package
https://mp.weixin.qq.com/s/q6R-kaN4XS5d_cgWtq46vw web
https://pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29 web