CVE-2023-41542: SQL Injection
Published Dec 30, 2023
·Updated
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.
Affected Software
2 affected components
maven/org.jeecgframework.boot:jeecg-boot-common<=3.5.3
Jeecg jeecg boot<=3.5.3
Event History
Dec 30, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Advisory Published
03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-41542?
CVE-2023-41542 is considered a high-severity vulnerability due to its potential for privilege escalation and data exposure.
2
How do I fix CVE-2023-41542?
To mitigate CVE-2023-41542, upgrade jeecg-boot to a version later than 3.5.3 to ensure the SQL injection vulnerability is patched.
3
What component is affected by CVE-2023-41542?
CVE-2023-41542 affects the jmreport/qurestSql component within jeecg-boot version 3.5.3.
4
Who can exploit CVE-2023-41542?
CVE-2023-41542 can be exploited by remote attackers with certain access to the affected system.
5
What type of vulnerability is CVE-2023-41542?
CVE-2023-41542 is classified as an SQL injection vulnerability, enabling attackers to manipulate SQL queries.