High · 8.8 CVE-2023-24789 EUVD-2023-1090GHSA-qxpm-5ghc-6gc2

jeecg-boot contains SQL Injection vulnerability

Published Mar 6, 2023 · Updated Mar 5, 2025 · Assigned by mitre

Description

jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-parent	<= 3.4.4	—	GHSA-qxpm-5ghc-6gc2