SQL Injection Vulnerability in Jeecg-Boot by Jeecg
CVE-2022-47105

9.8CRITICAL

Key Information:

Vendor

Jeecg

Status
Jeecg Boot
Vendor
CVE Published:
19 January 2023

What is CVE-2022-47105?

A SQL injection vulnerability was found in Jeecg-Boot version 3.4.4, specifically affecting the /sys/dict/queryTableData component. This flaw allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive data in the database. It is critical for users to review their implementations and adopt recommended security measures to mitigate this risk.

References

https://github.com/jeecgboot/jeecg-boot/issues/4393

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.