What is GHSA-23xf-5535-62v5?

GHSA-23xf-5535-62v5 is a security advisory published by GitHub Security Advisories with Critical severity. jeecg-boot vulnerable to SQL injection

Which CVE IDs does GHSA-23xf-5535-62v5 cover?

GHSA-23xf-5535-62v5 covers the following CVE IDs: CVE-2023-1741. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-23xf-5535-62v5?

GHSA-23xf-5535-62v5 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-23xf-5535-62v5?

GHSA-23xf-5535-62v5 affects 1 product, including: maven/org.jeecgframework.boot:jeecg-boot-parent:\u003c= 3.5.0.

GHSA-23xf-5535-62v5CriticalCVSS 9.8

jeecg-boot vulnerable to SQL injection

Vendor

GitHub Security Advisories

Published

March 31, 2023

Last Modified

April 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-1741 →

📋 Description

jeecg-boot 3.5.0 is vulnerable to SQL injection from functionality of the file SysDictMapper.java of the component Sleep Command Handler. The attack can be launched remotely and the exploit has been disclosed to the public and may be used.

🎯 Affected products1

maven/org.jeecgframework.boot:jeecg-boot-parent:<= 3.5.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-1741
https://github.com/private-null/report/blob/main/README.md
https://vuldb.com/?ctiid.224629
https://vuldb.com/?id.224629
https://github.com/advisories/GHSA-23xf-5535-62v5