CVE-2022-45210

MediumCVSS 4.3

Published: 25/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

Jeecg-boot version 3.4.3 was found to contain a SQL injection vulnerability in the /sys/user/deleteRecycleBin component. An attacker can exploit this flaw to manipulate database queries.

Risk Assessment

The risk involves unauthorized access to data, modification, or deletion, potentially compromising system confidentiality and integrity.

Recommendation

Immediately update Jeecg-boot to the latest version and apply security patches. Also review and secure all API endpoints against SQL injection.

Original NVD description (English source)

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.