153 matches found
GitHub Security Lab: [Java] CWE-089: MyBatis Mapper XML SQL Injection
This bug was reported directly to GitHub Security Lab...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4JExploitation-VulnerabiliyCVE-2021-44228. !Untitled...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4JExploitation-VulnerabiliyCVE-2021-44228. !Untitled...
mybatis: mishandles deserialization of object streams which could result in remote code execution
MyBatis before 3.5.6 mishandles deserialization of object streams...
Moderate: Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update
A minor version update from 7.8 to 7.9 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
OESA-2021-1292 mybatis security update
The MyBatis data mapper framework makes it easier to use a relational database with object-oriented applications. MyBatis couples objects with stored procedures or SQL statements using a XML descriptor or annotations. Simplicity is the biggest advantage of the MyBatis data mapper over object...
CVE-2018-11307
A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using MyBatis classes when using DefaultTyping. An attacker could use this flaw to achieve content exfiltration and possibly conduct further attacks...
SQL injection vulnerability exists in oasys (CNVD-2021-54083)
oasys is an OA office automation system , integrated jpa, mybatis and other frameworks. A SQL injection vulnerability exists in oasys, which can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in CicadasCMS
CicadasCMS is a CMS developed with springboot+mybatis+beetl. CicadasCMS suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...
TeaCMS suffers from SQL injection vulnerability (CNVD-2021-51349)
TeaCMS is a blog system developed by Spring-SpringMVC-MyBatis-MySQL database . TeaCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in MyBatis-Plus
Mybatis-Plus is a MyBatis enhancement toolkit to simplify CRUD operations . MyBatis-Plus suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
Arbitrary File Read Vulnerability in Novelty House-plus
Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . Novel-plus has an arbitrary file read vulnerability that can be exploited by an attacker to read any file in the system...
GHSA-QQ48-M4JX-XQH8 "Deserialization errors in MyBatis"
MyBatis before 3.5.6 mishandles deserialization of object streams leading to potential cache poisoning...
"Deserialization errors in MyBatis"
MyBatis before 3.5.6 mishandles deserialization of object streams leading to potential cache poisoning...
XMall has an information leakage vulnerability
XMall is based on SpringBoot MyBatis e-commerce system , including the front mall system and backend management system . XMall has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Logic flaw vulnerability in oasys
oasys is an OA office automation system , the use of Maven for project management , springboot framework based on the development of the project , mysql underlying database , the front-end freemarker template engine , Bootstrap as the front-end UI framework , integrated jpa, mybatis and other...
SQL Injection Vulnerability in oasys Frontend
oasys is an OA office automation system , the use of Maven for project management , springboot framework based on the development of the project , mysql underlying database , front-end freemarker template engine , Bootstrap as the front-end UI framework , integrated jpa, mybatis and other...
CVE-2020-26945
MyBatis before 3.5.6 mishandles deserialization of object streams...
