Threats tagged 'ghsa-2h26-hhrx-35hw'

JeecgBoot version 3.9.5 contains a SQL injection vulnerability in the Table Dictionary API, specifically in the JimuFormApiService.getTableDictList function. This flaw allows remote attackers with low privileges to manipulate the searchSql argument, potentially leading to unauthorized data access or modification. Public exploit code is available, but no official vendor response or patch has been provided.