Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08176
HistoryJan 27, 2022 - 12:00 a.m.

JeecgBoot SQL Injection Vulnerability

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
1

0.002 Low

EPSS

Percentile

54.5%

JeecgBoot is a Chinese low-code Java platform for enterprise Web applications.A SQL injection vulnerability exists in JeecgBoot version 3.0, which stems from the lack of validation of externally entered SQL statements in database-based applications. An attacker could exploit the vulnerability to execute illegal SQL commands.

CPENameOperatorVersion
jeecg jeecg_booteq3.0

0.002 Low

EPSS

Percentile

54.5%