Description
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jeecgframework.boot:jeecg-boot-common | <= 3.5.3 | — | GHSA-5v9r-788c-wc8p |