-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jeecgframework.boot:jeecg-boot-parent | maven | < 3.5.1 | 3.5.1 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies queryFilterTableDictInfo in SystemApiController as the entry point. SQL injection (CWE-89) typically occurs when user input is concatenated into SQL queries without proper validation(). Given the CVE and GHSA both specifically reference this method as the vulnerable component, and the nature of SQL injection vulnerabilities, we can conclude this method lacks adequate input sanitization for SQL query parameters.