JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.jeecgframework.boot:jeecg-boot-parent(Maven) | 0 | 3.5.1 | N/A |
CVSS Metrics