CVE-2023-1741

Source
https://cve.org/CVERecord?id=CVE-2023-1741
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1741.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1741
Aliases
Published
2023-03-30T21:00:06.950Z
Modified
2026-07-15T01:49:00.156137037Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
jeecg-boot Sleep Command SysDictMapper.java sql injection
Details

A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file SysDictMapper.java of the component Sleep Command Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224629 was assigned to this vulnerability.

Database specific
{
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "3.5.0"
                },
                {
                    "last_affected": "3.5.0"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1741.json"
}
References

Affected packages

Git / github.com/jeecgboot/jeecgboot

Affected ranges

Type
GIT
Repo
https://github.com/jeecgboot/jeecgboot
Events
Database specific
{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "3.5.0"
        },
        {
            "last_affected": "3.5.0"
        }
    ],
    "cpe": "cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*"
}

Affected versions

3.*
3.5.0
v3.*
v3.5.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1741.json"