Products: 2
Vulnerabilities: 3
Known Exploited: 0
2
Critical Level Threats
1
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2023-25330
A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection.
Last Modified: Nov 21, 2024
Published: Apr 05, 2023
CVE-2022-36594
Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.
Last Modified: Nov 21, 2024
Published: Sep 02, 2022
CVE-2020-26945
mybatis: mishandles deserialization of object streams which could result in remote code execution
Last Modified: Nov 21, 2024
Published: Oct 10, 2020
Items Per Page
