CVE-2024-48307: Improper Neutralization of Special Elements used in an SQL Command

JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData...

CVE-2024-48307

The JeecgBoot Java low-code platform (version v3.7.1 ) is vulnerable to a SQL injection flaw within the /onlDragDatasetHead/getTotalData component. An unauthenticated attacker can exploit this vulnerability to execute arbitrary SQL commands and extract sensitive information from the database. Whi...