Critical severity9.8NVD Advisory· Published Jul 28, 2023· Updated Jun 17, 2026

CVE-2023-39016

Description

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument.

Affected products

bboss-persistent/bboss-persistentdescription
bboss/bboss-persistentllm-fuzzy
Range: <=6.0.9

Patches

Vulnerability mechanics

References

gitee.com/bboss/bboss/issues/I7MH08nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000