6 matches found
CVE-2022-28111
MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...
cc.siyecao.mapper:clover-mapper (>=3.0.2, <=3.0.3), cc.siyecao.mapper:clover-mapper-dynamic (3.0.2) +1212 more potentially affected by CVE-2022-28111 via com.github.pagehelper:pagehelper (>=3.6.4, <=5.3.0)
com.github.pagehelper:pagehelper MAVEN version =3.6.4, =3.0.2, =3.0.2, =3.0.2, =3.0.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.0.1, =1.0.1, =5.2.1, =1.2.0.release, =1.6.0.release and more Source cves: CVE-2022-28111 Source advisory: OSV:GHSA-W559-623P-VFG8...
cc.siyecao.mapper:clover-mapper (>=3.0.2, <=3.0.3), cc.siyecao.mapper:clover-mapper-dynamic (3.0.2) +1212 more potentially affected by CVE-2022-28111 via com.github.pagehelper:pagehelper (>=3.6.4, <=5.3.0)
com.github.pagehelper:pagehelper MAVEN version =3.6.4, =3.0.2, =3.0.2, =3.0.2, =3.0.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.0.1, =1.0.1, =5.2.1, =1.2.0.release, =1.6.0.release and more Source cves: CVE-2022-28111 Source advisory: GHSA-W559-623P-VFG8...
CVE-2022-28111
MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...
CVE-2022-28111
CVE-2022-28111 concerns MyBatis PageHelper, affecting v1.x.x–3.7.0 and v4.0.0–5.0.0, plus v5.1.0–5.3.0. The root cause is a time-blind SQL injection via the orderBy parameter that allows external input to influence SQL statements without proper validation. Impact is described as high, with a netw...
cc.siyecao.mapper:clover-mapper (>=3.0.2, <=3.0.3), cc.siyecao.mapper:clover-mapper-dynamic (3.0.2) +1212 more potentially affected by CVE-2022-28111 via com.github.pagehelper:pagehelper (>=3.6.4, <=5.3.0)
com.github.pagehelper:pagehelper MAVEN version =3.6.4, =3.0.2, =3.0.2, =3.0.2, =3.0.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.0.1, =1.0.1, =5.2.1, =1.2.0.release, =1.6.0.release and more Source cves: CVE-2022-28111 Source advisory: MEND:CVE-2022-28111...