JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00692·Published 2023-06-19·Fixed in 3.5.1CWE-89
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00699·Published 2023-06-19·Fixed in 3.5.1CWE-89