Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
References
Link | Resource |
---|---|
https://github.com/jeecgboot/jeecg-boot/issues/3347 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
No history.
Information
Published : 2022-02-16 22:15
Updated : 2022-02-24 20:22
NVD link : CVE-2022-22880
Mitre link : CVE-2022-22880
CVE.ORG link : CVE-2022-22880
JSON object : View
Products Affected
jeecg
- jeecg_boot
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')