Описание
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2023-05-27 (исключая)
cpe:2.3:a:jeesite:jeesite:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
EPSS
Процентиль: 19%
0.00061
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-89