CVE-2023-38992 - jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData

CRITICAL

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData

Published Jul 28, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 73.40%

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2169		Advisory
https://github.com/advisories/GHSA-wp6c-29r3-jqw9		Advisory
https://github.com/jeecgboot/jeecg-boot/commit/648e66d5ef1547a01ff77bf9875f960ca39bbe8e
https://github.com/jeecgboot/jeecg-boot/issues/5173		ExploitIssue TrackingPatch
https://nvd.nist.gov/vuln/detail/CVE-2023-38992