Description
Jeecg-Boot v3.5.1 存在SQL注入漏洞，攻击者可以通过在/sys/dict/loadTreeData接口的title参数中注入恶意SQL语句，导致未经授权访问敏感数据。
Jeecg-Boot /sys/dict/loadTreeData SQL 注入漏洞（CVE-2023-38992）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-38992
https://github.com/advisories/GHSA-wp6c-29r3-jqw9
https://avd.aliyun.com/detail?id=AVD-2023-38992
https://www.venustech.com.cn/new_type/aqtg/20230731/25997.html
https://zhi.oscs1024.com/4534.html
https://www.oscs1024.com/hd/MPS-f2j4-cs6r
https://my.oschina.net/jeecg/blog/10107636