A vulnerability was found in J2EEFAST 2.7.0 and classified as critical. This issue affects the function getDeptList. The manipulation of the argument sql_filter leads to sql injection.

The identification of this vulnerability is CVE-2024-33155. The attack may be initiated remotely. There is no exploit available.