CVE-2022-22881: SQL Injection
Published Feb 16, 2022
·Updated
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
Affected Software
1 affected component
Jeecg jeecg boot<=3.0
Event History
Feb 16, 2022
CVE Published
via MITRE·09:42 PM
Data Sourced
via MITRE·09:42 PM
Description
Frequently Asked Questions
1
What is CVE-2022-22881?
CVE-2022-22881 is a SQL injection vulnerability found in Jeecg-boot v3.0.
2
How does CVE-2022-22881 affect Jeecg-boot?
CVE-2022-22881 allows an attacker to execute arbitrary SQL queries through the 'code' parameter in the /sys/user/queryUserComponentData endpoint of Jeecg-boot v3.0.
3
What is the severity of CVE-2022-22881?
CVE-2022-22881 has a severity rating of critical, with a CVSS score of 9.8.
4
How can I fix CVE-2022-22881?
To fix CVE-2022-22881, upgrade Jeecg-boot to a version that is not affected by the vulnerability or apply the available patch provided by the vendor.
5
Where can I find more information about CVE-2022-22881?
You can find more information about CVE-2022-22881 at the following link: [GitHub Issue](https://github.com/jeecgboot/jeecg-boot/issues/3348)