← All advisories

Critical severity9.8NVD Advisory· Published Jul 28, 2023· Updated Jun 17, 2026

CVE-2023-38992

CVE-2023-38992

Description

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jeecgframework.boot:jeecg-boot-commonMaven	< 3.5.3	3.5.3

Affected products

3

Jeecg/Jeecgboot
cpe:2.3:a:jeecg:jeecg_boot:3.5.1:*:*:*:*:*:*:*
jeecg-boot/jeecg-bootdescription
ghsa-coords
pkg:maven/org.jeecgframework.boot/jeecg-boot-common
Range: < 3.5.3

Patches

Vulnerability mechanics

References

4

github.com/jeecgboot/jeecg-boot/issues/5173nvdExploitIssue TrackingPatchWEB
github.com/advisories/GHSA-wp6c-29r3-jqw9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-38992ghsaADVISORY
github.com/jeecgboot/jeecg-boot/commit/648e66d5ef1547a01ff77bf9875f960ca39bbe8eghsaWEB

News mentions

0

No linked articles in our index yet.