-
Notifications
You must be signed in to change notification settings - Fork 14.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SQL注入风险 #6956
Comments
我们项目不存在这个地址,你们自己写的吧 官方漏洞升级日志见 |
真不是我们写的,我们全局搜索contractor关键字都找不到 |
我现在用的是2.2.0版本,升级到那个版本改动最小呢,升级到3.0版本我记得还得升级JDK吧 |
请问是您们被该漏洞攻击了还是有人跟你们说这个路径有漏洞? |
搜不到就说明项目中不存在这个路径,是其他人自己写的爆出漏洞,你们没有吧 |
公司攻防演练检测到的,前天晚上急急忙忙的让我们下线服务,说有SQL注入风险,让他们给详细的数据,不给说是情报还没公开。我把codegenerate升级到1.4.5重新上服务就没通知有风险了。所以到现在也不清楚是那里的原因 |
版本号:
2.2.0,3.5.2
问题描述:
项目被攻防演练发现存在SQL注入漏洞,/jeecg-boot/contractor/contractor/list 需要我们下线这个路径下的资源,但是在项目代码中找不到不这个路径,这种情况该如何处理呢
错误截图:
友情提示:
The text was updated successfully, but these errors were encountered: