5 matches found
CVE-2026-124557
A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class Generator. The manipulation of the argument tableName results in path traversal. The attack may b...
EUVD-2026-119779
A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class Generator. The manipulation of the argument tableName results in path traversal. The attack may b...
CVE-2026-124557
OtterMind Chat2DB versions up to 5.3.8 are vulnerable to a path traversal flaw within the Class Generator component. Specifically, the DbMybatisGenerateServiceImpl.generateClass function fails to properly sanitize the tableName argument, allowing an attacker to perform path traversal. This vulner...
CVE-2026-124557: OtterMind Chat2DB: A vulnerability was detected in OtterMind Chat2DB up to 5.3.8
A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class Generator. The manipulation of the argument tableName results in path traversal. The attack may b...
SAP NetWeaver AS operating system command injection vulnerability
SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but is also the basic platform for SAP software. SAP NetWeaver AS ABAP suffers from an operating system command injection vulnerability that originates from allowing an attacker with elevated...