Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-1454
HistoryMar 17, 2023 - 7:15 a.m.

Sql injection

2023-03-1707:15:00
PRIOn knowledge base
www.prio-n.com
6
vulnerability
critical
jeecg-boot 3.5.0
sql injection
remote attack
exploit
disclosed
apiselectid
vdb-223299
nvd

9.7 High

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.7%

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223299.

CPENameOperatorVersion
jeecg-booteq3.5.0

9.7 High

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.7%