CVE-2019-1010201

2019-07-2318:15:14

Google

osv.dev

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

JSON

Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network connectivity,authenticated. The fixed version is: 4.0 and later.

CPENameOperatorVersion
jeesiteeq1.0.3
jeesiteeq1.0.0
jeesiteeqV1.0.1
jeesiteeq1.0.4
jeesiteeq1.2.6
jeesiteeq1.2.7
jeesiteeq1.0.2
jeesiteeq1.0.5

Name	Operator	Version
jeesite	eq	1.0.3
jeesite	eq	1.0.0
jeesite	eq	V1.0.1
jeesite	eq	1.0.4
jeesite	eq	1.2.6
jeesite	eq	1.2.7
jeesite	eq	1.0.2
jeesite	eq	1.0.5

References

github.com/thinkgem/jeesite/blob/master/src/main/java/com/thinkgem/jeesite/modules/act/dao/ActDao.java