CVE-2023-38992

Summary

CVE-2023-38992: A SQL injection vulnerability was identified in jeecg-boot version 3.5.1. An attacker could exploit this issue by manipulating the title parameter in the /sys/dict/loadTreeData endpoint, potentially gaining unauthorized access to sensitive data or even taking control of the affected system. This vulnerability highlights the importance of promptly applying security patches and input validation techniques to prevent SQL injection attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.