Description
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3347
Related Vulnerabilities
CVE-2021-23497 Vulnerability in npm package @strikeentco/set
CVE-2021-32860 Vulnerability in maven package org.webjars.npm:izimodal
CVE-2020-7707 Vulnerability in maven package org.webjars.npm:property-expr
CVE-2020-11972 Vulnerability in maven package org.apache.camel:camel-rabbitmq
CVE-2017-12629 Vulnerability in maven package org.apache.solr:solr-core