~ / search / GHSA-qxpm-5ghc-6gc2

GHSA-qxpm-5ghc-6gc2

jeecg-boot contains SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-24789

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-boot-parent <= 3.4.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.

References

External links from the advisory. They lead to third-party sites.