CVE-2023-41542

Summary

CVE-2023-41542 is a SQL injection vulnerability affecting jeecg-boot version 3.5.3. This issue allows remote attackers to exploit the jmreport/qurestSql component and escalate privileges, potentially gaining access to sensitive information. Successful exploitation could result in unauthorized access to the system and data compromise. Users are strongly urged to update their jeecg-boot installation to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.