CVE-2023-38992

creationtimestamp| type| source ---|---|--- 2023-07-28 18:35:56+00:00| seen| https://t.me/cibsecurity/67377...

CVE-2023-38992

Jeecg-Boot v3.5.1 is affected by a SQL injection vulnerability exposed via the title parameter in the /sys/dict/loadTreeData API. Root cause: insufficient input handling leading to SQL injection (CWE-89). Impact: high-severity access to sensitive data; CVSS v3.1 base score 9.8. Mitigation: apply ...