critical9.8
CVE-2023-41542
Jeecg Boot SQL injection vulnerability
Impact
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jeecgframework.boot:jeecg-boot-common | <= 3.5.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeecg | Jeecg Boot | through 3.5.3 |