CVE-2025-44033

The oa_system oasys version 1.1 is vulnerable to an SQL injection vulnerability (CWE-89) within the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java. A remote attacker can exploit this flaw to execute arbitrary code . A CVSS 3.1 score of 9.8 (CRITICAL) re...