~ / search / GHSA-q448-6c3m-cxmj

GHSA-q448-6c3m-cxmj

Cross-site Scripting in jeecg-boot

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-44585

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-base < 3.1.0 3.1.0
Maven org.jeecgframework.boot:jeecg-boot-base-core < 3.1.0 3.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

jeecg-boot is a code generator. A Cross Site Scripting (XSS) vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

References

External links from the advisory. They lead to third-party sites.