CVE-2024-48307: SQL Injection
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
Other sources
JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48307?
CVE-2024-48307 is classified as a high severity vulnerability due to its potential to allow SQL injection exploitation.
How do I fix CVE-2024-48307?
To fix CVE-2024-48307, upgrade JeecgBoot to a version later than 3.7.1 where the vulnerability has been addressed.
What specific component is affected by CVE-2024-48307?
CVE-2024-48307 affects the /onlDragDatasetHead/getTotalData component within JeecgBoot v3.7.1.
What type of vulnerability is CVE-2024-48307?
CVE-2024-48307 is a SQL injection vulnerability that can allow unauthorized SQL commands to be executed.
Who is affected by CVE-2024-48307?
Any user or organization utilizing JeecgBoot version 3.7.1 is affected by CVE-2024-48307.