Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22566
HistoryFeb 18, 2022 - 12:00 a.m.

Jeecg-boot SQL Injection Vulnerability (CNVD-2022-22566)

2022-02-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.002 Low

EPSS

Percentile

54.5%

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot version v3.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via /jeecg-boot/sys/user/queryUserByDepId.

CPENameOperatorVersion
jeecg-boot jeecg-booteq3.0

0.002 Low

EPSS

Percentile

54.5%