CVE-2023-34601

CriticalCVSS 9.8

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.58%

43th percentile - higher than 43% of all known CVEs

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.

This vulnerability may allow attackers to access the database, leading to data disclosure or modification.

It is recommended to update to the latest version of Jeesite to mitigate this vulnerability.

Original NVD description (English source)

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.