CVE-2023-38992

CriticalCVSS 9.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

72.04%

99th percentile - higher than 99% of all known CVEs

Summary

Version 3.5.1 of jeecg-boot was found to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade to the latest version of jeecg-boot and to validate and sanitize input data in the application.

Original NVD description (English source)

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.