CVE-2023-1454

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1454
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1454.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1454
Aliases
Published
2023-03-17T06:56:08.267Z
Modified
2026-07-15T01:49:16.089992018Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
jeecg-boot qurestSql sql injection
Details

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223299.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1454.json",
    "cwe_ids": [
        "CWE-89"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.5.0"
                },
                {
                    "last_affected": "3.5.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/jeecgboot/jeecgboot

Affected ranges

Type
GIT
Repo
https://github.com/jeecgboot/jeecgboot
Events
Introduced
42eedcd3b32fe314f985e98521f42745cc5bdaad
Last affected
42eedcd3b32fe314f985e98521f42745cc5bdaad
Database specific 
{
    "extracted_events": [
        {
            "introduced": "3.5.0"
        },
        {
            "last_affected": "3.5.0"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*"
}

Affected versions

3.*
3.5.0
v3.*
v3.5.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1454.json"