Description
jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/4976
Related Vulnerabilities
CVE-2023-40826 Vulnerability in maven package org.pf4j:pf4j
CVE-2020-7681 Vulnerability in npm package marscode
CVE-2020-11022 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2020-7723 Vulnerability in npm package promisehelpers
CVE-2022-23913 Vulnerability in maven package org.apache.activemq:artemis-commons