Lucene search

K
cvelistMitreCVELIST:CVE-2023-38905
HistoryAug 17, 2023 - 12:00 a.m.

CVE-2023-38905

2023-08-1700:00:00
mitre
www.cve.org
sql injection
jeecg-boot v.3.5.0
vulnerability
denial of service
benchmark
pg_sleep
dbms_lock.sleep
waitfor
decode
dbms_pipe.receive_message

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE functions.

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVELIST:CVE-2023-38905