CVE-2022-45206

CriticalCVSS 9.8

Published: 25/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

A SQL injection vulnerability was discovered in Jeecg-boot version 3.4.3 via the /sys/duplicate/check component. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential theft, modification, or deletion of database data, leading to a breach of confidentiality and integrity of organizational information.

Recommendation

Immediately update Jeecg-boot to the latest patched version. Also review and secure all API endpoints against SQL injection attacks.

Original NVD description (English source)

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.