SQL injection vulnerability exists in oasys (CNVD-2021-54083)

oasys is an OA office automation system , integrated jpa, mybatis and other frameworks. A SQL injection vulnerability exists in oasys, which can be exploited by an attacker to obtain sensitive information from the database...