In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
References
Link | Resource |
---|---|
https://github.com/jeecgboot/jeecg-boot/issues/3331 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-01-25 07:15
Updated : 2022-01-28 12:29
NVD link : CVE-2021-46089
Mitre link : CVE-2021-46089
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
jeecg
- jeecg_boot