Description
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3348
Related Vulnerabilities
CVE-2020-36049 Vulnerability in maven package org.webjars.npm:socket.io-parser
CVE-2022-38750 Vulnerability in maven package org.yaml:snakeyaml
CVE-2020-7598 Vulnerability in maven package org.webjars.npm:minimist
CVE-2020-24660 Vulnerability in npm package node-lemonldap-ng-handler
CVE-2023-22465 Vulnerability in maven package org.http4s:http4s-core_3