Critical · 9.8 CVE-2022-22881 EUVD-2022-0978GHSA-f9pg-g9xw-r5g2

SQL Injection in Jeecg-boot

Published Feb 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-base	<= 3.0	—	GHSA-f9pg-g9xw-r5g2
Maven	org.jeecgframework.boot:jeecg-boot-base-core	<= 3.0	—	GHSA-f9pg-g9xw-r5g2