CVE-2019-1010201

Jeesite 1.2.7 is affected by: SQL Injection

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network connectivity,authenticated. The fixed version is: 4.0 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01155 · 66.8th percentile
Published
2019-07-23T17:07Z
EPSS history
Timeline
  • 23 JUL 17:07Z
    Jeesite 1.2.7 is affected by: SQL Injection
    cvelistv5