Critical · 9.8 CVE-2022-47105 EUVD-2023-0372GHSA-6w89-c65w-jx2c

Jeecg-boot is vulnerable to SQL injection

Published Jan 19, 2023 · Updated Apr 3, 2025 · Assigned by mitre

Description

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-base-core	<= 3.4.4	—	GHSA-6w89-c65w-jx2c
Maven	org.jeecgframework.boot:jeecg-module-system	<= 3.4.4	—	GHSA-6w89-c65w-jx2c