GHSA-26hm-r6mg-963c

ghsaUSosv

SQL Injection in JeecgBoot

view advisory published 2022-01-26Licence: CC-BY-4.0

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. A patch has been released on the repository's `master` branch.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-46089US	critical9.8	1.99% (81st)	—	2022-01-25
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

references

External citations — patches, advisories, analysis.

https://github.com/jeecgboot/jeecg-bootPACKAGE
https://github.com/jeecgboot/jeecg-boot/commit/baefc1338dd03de36384ce7d5846b08041b488d0WEB
https://github.com/jeecgboot/jeecg-boot/issues/3331WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-46089ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan