CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22881

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

Sql injection

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

Sql injection

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22881

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22881

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

CVE-2022-22881

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

CVE-2022-22880

Jeecg-boot v3.0 is affected by an SQL injection in the code path /jeecg-boot/sys/user/queryUserByDepId, exploitable via the code parameter (also cited via queryUserByDepId with id/realname in some reports). The vulnerability stems from improper handling of user-supplied input in that function, en...

CVE-2022-22881

Jeecg-boot v3.0 is reported to contain a SQL injection vulnerability in the code parameter of /sys/user/queryUserComponentData. The CVE-2022-22881 entry documents a high-severity issue (CVSS v3.1 base score 9.8; Network Vector, Privileges None, User Interaction NONE) with potential impact on conf...

CVE-2022-22881: Improper Neutralization of Special Elements used in an SQL Command

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...

PT-2022-15715

Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/sys/user/queryUserComponentData" API endpoint. Recommendations For Jeecg-boot version 3.0, as a temporary workaround, consider...

PT-2022-15714

Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/jeecg-boot/sys/user/queryUserByDepId" API endpoint. Recommendations For Jeecg-boot version 3.0, consider restricting access to the...

Jeecg-Boot SQL注入漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...

Jeecg-boot 安全漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot version v3.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22880: Improper Neutralization of Special Elements used in an SQL Command

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

SQL Injection

jeecg-boot-base-api is vulnerable to SQL injection. An attacker is able to modify or delete, causing persistent changes to the queries that the application makes to its database, mainly SQL, to compromise the underlying server or other back-enfd infrastructure...

jeecg Access Control Error Vulnerability

jeecg is a software application. An intelligent development platform based on a code generator. An Access Control Error vulnerability exists in Jeecg that stems from the product not doing valid validation of input data. An attacker can exploit the vulnerability to access sensitive files by...