SQL Injection Vulnerability in JeecgBoot by Jeecg
CVE-2023-34602
7.5HIGH
What is CVE-2023-34602?
JeecgBoot versions up to 3.5.1 have been found to be susceptible to a SQL injection vulnerability, particularly in the method queryTableDictItemsByCode within the SystemApiController. This flaw can allow an attacker to execute arbitrary SQL commands through the affected component, potentially leading to unauthorized data access or manipulation.