CVE-2022-45207

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.98% chance of exploitation in the next 30 days, 61st percentile

Published

2022-11-25

Updated

2026-07-09

Proof-of-concept exploits (1)

• jeecgboot/jeecg-boot/issues/412748219★ · 2026-10-14

Security advisories

• advisories/GHSA-4j2x-v3mr-467m

References

• CVE Record
• NVD entry

Related

• CVE-2021-46089
• CVE-2022-45205
• CVE-2022-45208
• CVE-2022-45210
• CVE-2023-34602
• CVE-2024-48307