Description
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
Remediation
References
http://jeecg-boot.com
https://github.com/jeecgboot/jeecg-boot/issues/4127
Related Vulnerabilities
CVE-2023-22893 Vulnerability in npm package @strapi/plugin-users-permissions
CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2021-23412 Vulnerability in npm package gitlogplus
CVE-2020-8134 Vulnerability in npm package ghost
CVE-2020-12648 Vulnerability in maven package org.webjars.npm:tinymce