CVE-2022-45205: SQL Injection
Published Nov 25, 2022
·Updated
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
Affected Software
1 affected component
Jeecg jeecg boot=3.4.3
Event History
Nov 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-45205?
CVE-2022-45205 is a SQL injection vulnerability in Jeecg-boot v3.4.3 via the component /sys/dict/queryTableData.
2
How severe is CVE-2022-45205?
CVE-2022-45205 has a severity rating of 5.3, which is considered medium.
3
How does CVE-2022-45205 affect Jeecg-boot?
CVE-2022-45205 affects Jeecg-boot v3.4.3 and allows SQL injection through the /sys/dict/queryTableData component.
4
What is the CWE ID for CVE-2022-45205?
The CWE ID for CVE-2022-45205 is 89, which corresponds to Improper Neutralization of Special Elements in Output Used by a Downstream Component Injection.
5
Is there a fix available for CVE-2022-45205?
There is currently no fix available for CVE-2022-45205, but it is recommended to upgrade to a patched version once it becomes available.