CVE-2022-45207

CriticalCVSS 9.8

Published: 25/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

56th percentile - higher than 56% of all known CVEs

Summary

A SQL injection vulnerability was discovered in Jeecg-boot v3.4.3 within the updateNullByEmptyString component. Attackers can exploit this flaw to manipulate database queries.

Risk Assessment

The risk involves unauthorized access, modification, or deletion of data, potentially compromising the confidentiality and integrity of the system.

Recommendation

Immediately update Jeecg-boot to the latest version and apply relevant security patches. Review and secure all endpoints using the updateNullByEmptyString component.

Original NVD description (English source)

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.