critical9.8
CVE-2023-41543
Jeecg Boot SQL Injection
Impact
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jeecgframework.boot:jeecg-boot-common | <= 3.5.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeecg | Jeecg Boot | through 3.5.3 |