CVE-2022-45205

MediumCVSS 5.3

Published: 25/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability in the /sys/dict/queryTableData component. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential theft, modification, or deletion of database data, leading to a breach of confidentiality and integrity of organizational information.

Recommendation

It is recommended to immediately update Jeecg-boot to the latest version and apply security patches. Additionally, review and secure all API endpoints against SQL injection.

Original NVD description (English source)

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.