CVE-2022-45208: SQL Injection
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.jeecgframework.boot:jeecg-module-systemto a version that resolves this vulnerability.Fixed in 3.4.4
Event History
Frequently Asked Questions
What is CVE-2022-45208?
CVE-2022-45208 is a SQL injection vulnerability discovered in Jeecg-boot v3.4.3 through the /sys/user/putRecycleBin component.
How severe is CVE-2022-45208?
CVE-2022-45208 has a severity rating of 4.3 (medium).
Which version of Jeecg-boot is affected by CVE-2022-45208?
Jeecg-boot version 3.4.3 is affected by CVE-2022-45208.
How can I fix CVE-2022-45208?
To fix CVE-2022-45208, it is recommended to update your Jeecg-boot installation to a version that is not affected by the vulnerability.
Is there any additional information about CVE-2022-45208?
You can find more information about CVE-2022-45208 on the official Jeecg-boot website and the associated GitHub issue.