Critical · 9.8 CVE-2022-45207 EUVD-2022-7226GHSA-4j2x-v3mr-467m

Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

Published Nov 25, 2022 · Updated Jul 9, 2026 · Assigned by mitre

Description

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-module-system	< 3.4.4	3.4.4	GHSA-4j2x-v3mr-467m