Description
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3347
Related Vulnerabilities
CVE-2020-28458 Vulnerability in npm package datatables.net
CVE-2021-23416 Vulnerability in npm package curly-bracket-parser
CVE-2022-24437 Vulnerability in npm package git-pull-or-clone
CVE-2020-7760 Vulnerability in maven package org.apache.marmotta.webjars:codemirror
CVE-2020-7792 Vulnerability in maven package org.webjars.npm:mout