Critical · 9.8 CVE-2022-22880 EUVD-2022-1204GHSA-vh2r-x97c-2vpr

SQL Injection in Jeecg-boot

Published Feb 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-base	<= 3.0	—	GHSA-vh2r-x97c-2vpr
Maven	org.jeecgframework.boot:jeecg-boot-base-core	<= 3.0	—	GHSA-vh2r-x97c-2vpr