high7.5
CVE-2023-34603
JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
Impact
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component `queryFilterTableDictInfo` in method `org.jeecg.modules.api.controller.SystemApiController`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jeecgframework.boot:jeecg-boot-parent | < 3.5.1 | 3.5.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeecg | Jeecgboot | through 3.5.1 |