Description
Jeecg-Boot 存在SQL注入漏洞，攻击者可以通过在/sys/dict/queryTableData接口的title参数中注入恶意SQL语句，导致未经授权访问敏感数据。
Jeecg-Boot /sys/dict/queryTableData SQL 注入漏洞（CVE-2022-45205）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-45205
https://github.com/jeecgboot/JeecgBoot/issues/4128
https://avd.aliyun.com/detail?id=AVD-2022-45205
https://cve.imfht.com/detail/CVE-2022-45205
https://www.oscs1024.com/hd/MPS-2022-64236
https://www.cvedetails.com/cve/CVE-2022-45205/
https://access.redhat.com/security/cve/cve-2022-45205