Lucene search
+L

47 matches found

NVD
NVD
•added 2022/04/11 8:15 p.m.•43 views

CVE-2022-24815

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...

8.1CVSS0.01377EPSS
SaveExploits1References3
Prion
Prion
•added 2022/04/11 8:15 p.m.•24 views

Sql injection

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...

6.8CVSS8.5AI score0.01377EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/04/11 7:25 p.m.•2 views

CVE-2022-24815

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...

9.2CVSS0.01377EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/04/11 7:25 p.m.•47 views

CVE-2022-24815 SQL Injection when creating an application with Reactive SQL backend

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...

8.1CVSS8.8AI score0.01377EPSS
SaveExploits1References3
CVE
CVE
•added 2022/04/11 7:25 p.m.•119 views

CVE-2022-24815

CVE-2022-24815 affects JHipster-generated applications that use a SQL database with reactive Spring WebFlux. The vulnerability resides in the entity repository’s findAllBy(Pageable, Criteria) where clause, where Criteria.toString() is not sanitized and user input is passed through directly, enabl...

8.1CVSS8.5AI score0.01377EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•5 views

CVE-2022-24815: Improper Neutralization of Special Elements used in an SQL Command

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications...

8.1CVSS7.3AI score0.01377EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/07 12:00 a.m.•4 views

PT-2022-16895

Name of the Vulnerable Software and Affected Versions JHipster versions prior to 7.8.1 Description A SQL Injection vulnerability exists in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. This issue affects monolith and...

8.1CVSS5.8AI score0.01377EPSS
SaveExploits1References9
Rows per page
Query Builder