Maven/org.jeecgframework.boot:jeecg-boot-common CVE-2023-38992: critical 9.8, EPSS 73.40%
SQL injection in jeecg-boot
Action: Upgrade org.jeecgframework.boot:jeecg-boot-common to 3.5.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.3 | - |
Fixed versions
| 3.5.3 |
Sources
- osv: GHSA-wp6c-29r3-jqw9
- https://nvd.nist.gov/vuln/detail/CVE-2023-38992
- https://github.com/jeecgboot/jeecg-boot/issues/5173
- https://github.com/jeecgboot/jeecg-boot/commit/648e66d5ef1547a01ff77bf9875f960ca39bbe8e
- https://github.com/jeecgboot/jeecg-boot-starter
CVE-2023-38992 · published · modified · JSON