Description
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/5173
Related Vulnerabilities
CVE-2021-23362 Vulnerability in npm package hosted-git-info
CVE-2021-33360 Vulnerability in npm package @stoqey/gnuplot
CVE-2018-5653 Vulnerability in maven package org.apache.cayenne.modeler:cayenne-modeler
CVE-2023-24188 Vulnerability in maven package com.bstek.ureport:ureport2-core
CVE-2011-4969 Vulnerability in maven package org.webjars:jquery