Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jeecgframework.boot:jeecg-module-system

5 known vulnerabilities (3 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 critical, 2 medium
Registry
Maven Central

Advisories 5

  • CVE-2022-47105Critical 9.8

    Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

    Affected: through 3.4.4.

  • CVE-2022-45210Medium 4.3

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.

    Affected: fixed in 3.4.4.

  • CVE-2022-45208Medium 4.3

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.

    Affected: fixed in 3.4.4.

  • CVE-2022-45207Critical 9.8

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

    Affected: fixed in 3.4.4.

  • CVE-2022-45206Critical 9.8

    Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

    Affected: fixed in 3.4.4.