Maven/org.jeecgframework.boot:jeecg-boot-common CVE-2023-40989: critical 9.8, EPSS 2.19%
SQL injection in jeecgboot
Action: Upgrade org.jeecgframework.boot:jeecg-boot-common to 3.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-rwhx-6hx7-pqc8
- https://nvd.nist.gov/vuln/detail/CVE-2023-40989
- https://github.com/jeecgboot/jeecg-boot/commit/473875a9d261780a3400cf6f8260ca441b768ed1
- https://github.com/jeecgboot/jeecg-boot/commit/56e81fbf7bce11d2762b691f5d965b2265be608
- https://github.com/jeecgboot/jeecg-boot/commit/87677df925e55e51233bf740433b30a751fc7705
- https://github.com/Zone1-Z/CVE-2023-40989/blob/main/CVE-2023-40989
CVE-2023-40989 · published · modified · JSON