~ / search / GHSA-v87q-rpwp-qr7q

GHSA-v87q-rpwp-qr7q

Jeecg-boot vulnerable to SQL Injection

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-45210

Packages

EcosystemPackageAffectedFixed in
Maven org.jeecgframework.boot:jeecg-module-system < 3.4.4 3.4.4

Details

As written in the advisory (Markdown source, shown as plain text).

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.

References

External links from the advisory. They lead to third-party sites.