CVE-2023-38992

Description

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

Affected packages (1)

• Maven/org.jeecgframework.boot:jeecg-boot-commonfrom 0, < 3.5.3

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-38992
• PATCHhttps://github.com/jeecgboot/jeecg-boot-starter
• WEBhttps://github.com/jeecgboot/jeecg-boot/commit/648e66d5ef1547a01ff77bf9875f960ca39bbe8e
• WEBhttps://github.com/jeecgboot/jeecg-boot/issues/5173