Описание
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior.
A flaw was found in MyBatis Plus. The issue contains a SQL Injection vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat build of Quarkus | mybatis | Not affected | ||
| Red Hat Fuse 7 | mybatis | Not affected | ||
| Red Hat Integration Camel K 1 | mybatis | Not affected | ||
| Red Hat Integration Camel Quarkus 1 | mybatis | Not affected | ||
| Red Hat Integration Data Virtualisation Operator | mybatis | Not affected | ||
| Red Hat JBoss Fuse 6 | mybatis | Not affected | ||
| Red Hat JBoss Fuse Service Works 6 | mybatis | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior.
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java.
EPSS
9.8 Critical
CVSS3