Description
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
Remediation
References
http://jeecg-boot.com
https://github.com/jeecgboot/jeecg-boot/issues/4127
Related Vulnerabilities
CVE-2019-18213 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.web
CVE-2020-11072 Vulnerability in npm package slp-validate
CVE-2022-0155 Vulnerability in npm package follow-redirects
CVE-2021-44878 Vulnerability in maven package org.pac4j:pac4j-core
CVE-2021-32622 Vulnerability in npm package matrix-react-sdk