CVE-2023-40989

9.8

CRITICALCVSS v3

Published

September 22, 2023

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.

jeecg / jeecg_boot

cpe:2.3:a:jeecg:jeecg_boot:3.0:*:*:*:*:*:*:*

3.0

jeecg / jeecg_boot

cpe:2.3:a:jeecg:jeecg_boot:3.5.3:*:*:*:*:*:*:*

3.5.3

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2023-40989

Description

More on this CVE