Description
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/4984
Related Vulnerabilities
CVE-2018-16487 Vulnerability in npm package lodash._basemerge
CVE-2019-10746 Vulnerability in npm package mixin-deep
CVE-2022-40309 Vulnerability in maven package org.apache.archiva:maven2-repository
CVE-2018-3713 Vulnerability in npm package angular-http-server
CVE-2023-33202 Vulnerability in maven package org.bouncycastle:bcprov-jdk18on