CVE-2023-41543: SQL Injection
Published Dec 30, 2023
·Updated
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.
Affected Software
2 affected components
maven/org.jeecgframework.boot:jeecg-boot-common<=3.5.3
Jeecg jeecg boot<=3.5.3
Event History
Dec 30, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Advisory Published
03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-41543?
CVE-2023-41543 has been classified as a high severity vulnerability due to its potential for remote privilege escalation.
2
How do I fix CVE-2023-41543?
To fix CVE-2023-41543, upgrade to a version of jeecg-boot that is higher than 3.5.3, which addresses this vulnerability.
3
What types of attacks can exploit CVE-2023-41543?
CVE-2023-41543 can be exploited through SQL injection attacks, enabling unauthorized access to sensitive information.
4
Is CVE-2023-41543 present in earlier versions of jeecg-boot?
Yes, CVE-2023-41543 affects jeecg-boot version 3.5.3 and all earlier versions.
5
What components of jeecg-boot are affected by CVE-2023-41543?
CVE-2023-41543 specifically affects the /sys/replicate/check component of jeecg-boot.