Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2023/08/17 9:30 p.m.31 views

Jeecg-boot SQL Injection vulnerability

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS7.6AI score0.00277EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/08/17 9:30 p.m.16 views

GHSA-9V66-9239-CQV2 Jeecg-boot SQL Injection vulnerability

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS5.6AI score0.00277EPSS
Exploits1References4
NVD
NVD
added 2023/08/17 7:15 p.m.8 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS5.8AI score0.00277EPSS
Exploits1References2
OSV
OSV
added 2023/08/17 7:15 p.m.17 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS7.8AI score
Exploits0References2
Prion
Prion
added 2023/08/17 7:15 p.m.82 views

Sql injection

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

1.7CVSS5.7AI score0.00277EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/17 12:0 a.m.9 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

7.8AI score0.00277EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/08/17 12:0 a.m.20 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

6AI score0.00277EPSS
Exploits1References2
CVE
CVE
added 2023/08/17 12:0 a.m.49 views

CVE-2023-38905

CVE-2023-38905 affects Jeecg-boot v3.5.0 and earlier. The issue is an SQL injection vulnerability that a local attacker can exploit to cause a denial of service, by injecting through functions such as Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE. The availa...

5.5CVSS5.7AI score0.00277EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder