Description

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

Remediation

References

https://github.com/jeecgboot/jeecg-boot/issues/4127

Related Vulnerabilities

CVE-2020-28436 Vulnerability in npm package google-cloudstorage-commands

CVE-2017-16114 Vulnerability in maven package org.webjars.bower:marked

CVE-2022-0272 Vulnerability in maven package io.gitlab.arturbosch.detekt:detekt-core

CVE-2021-32623 Vulnerability in maven package org.opencastproject:opencast-kernel

CVE-2017-16103 Vulnerability in npm package serveryztyzt

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Third Party Advisory CWE-89