Количество 2
Количество 2
CVE-2023-25330
A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection.
GHSA-32qq-m9fh-f74w
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-25330 A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| GHSA-32qq-m9fh-f74w MyBatis-Plus vulnerable to SQL injection via TenantPlugin | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
Уязвимостей на страницу