Critical · 9.8 CVE-2021-46089 EUVD-2022-0420GHSA-26hm-r6mg-963c

SQL Injection in JeecgBoot

Published Jan 25, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-base	<= 3.0	—	GHSA-26hm-r6mg-963c
Maven	org.jeecgframework.boot:jeecg-boot-base-core	<= 3.0	—	GHSA-26hm-r6mg-963c