Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85101
HistoryApr 13, 2022 - 12:00 a.m.

JHipster SQL Injection Vulnerability

2022-04-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
jhipster
sql injection
vulnerability
validation
angular
react
spring framework
exploitation
sensitive data
database

EPSS

0.002

Percentile

53.1%

JHipster is an open source application builder that develops web applications and microservices primarily using Angular or React and Spring Framework.JHipster suffers from a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements, which can be exploited by attackers to execute illegal SQL commands to obtain sensitive database data.

EPSS

0.002

Percentile

53.1%