袁乐天

**Name of the Vulnerable Software and Affected Versions** bboss-persistent versions 6.0.9 and below **Description** The issue is related to a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument to the `createPool` function. **Recommendations** For bboss-persistent versions 6.0.9 and below, consider restricting access to the `com.frameworkset.common.poolman.util.SQLManager.createPool` component to minimize the risk of exploitation. As a temporary workaround, avoid passing unchecked arguments to the `createPool` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.