Description
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3348
Related Vulnerabilities
CVE-2020-26234 Vulnerability in maven package org.opencastproject:opencast-kernel
CVE-2020-7619 Vulnerability in npm package get-git-data
CVE-2020-7656 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2020-26259 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2018-20677 Vulnerability in maven package org.webjars:bootstrap