CVE-2024-48307 — Vulnerability in...
JeecgBoot SQL Injection vulnerability
Summary
Advisory Timeline
- First published October 31, 2024 (711 days ago).
- Last revised November 1, 2024 — 2 days after initial publication.
Affected Packages (1)
Affects 1 ecosystem: maven (1).
| Package | Ecosystem | Affected | Fixed In |
|---|---|---|---|
| org.jeecgframework.boot:jeecg-boot-parent | maven | 3.5.1 | Range-based data available |
Vulnerability Classification
Common Weakness Enumeration (CWE) identifiers for this vulnerability type.
- CWE-89SQL InjectionMITRE
CVSS Score Breakdown
What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Frequently Asked Questions
- What is CVE-2024-48307?
- JeecgBoot SQL Injection vulnerability This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.8/10).
- How do I check if my project is affected by CVE-2024-48307?
- CVE-2024-48307 affects org.jeecgframework.boot:jeecg-boot-parent. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-48307 and 200,000+ other known vulnerabilities.
Severity & Exploitability
Exploitation is straightforward and causes maximum impact. Patch immediately.
Also Known As
Related CVEs
- CVE-2022-45207CRITICAL
Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
- CVE-2023-41542CRITICAL
Jeecg Boot SQL injection vulnerability
- CVE-2023-1784CRITICAL
jeecg-boot vulnerable to improper authentication
- CVE-2022-47105CRITICAL
Jeecg-boot is vulnerable to SQL injection
- CVE-2023-34659CRITICAL
jeecg-boot SQL injection vulnerability
- CVE-2023-41543CRITICAL
Jeecg Boot SQL Injection
- CVE-2023-42268CRITICAL
Jeecg boot SQL Injection vulnerability
- CVE-2023-38992CRITICAL
SQL injection in jeecg-boot
Check if you're affected
Scan your dependencies to see if this vulnerability affects your projects.
Scan Your Dependencies