1 matches found
SQL Injection
com.yahoo.elide:elide-datastore-aggregation is vulnerable to SQL Injection attacks. A specifically crafted query statement through a parameterized TEXT column allows a malicious user to inject and execute arbitrary SQL queries via the ValueType enum...
8.1CVSS5AI score0.01389EPSS
SaveExploits0References4Affected Software1
20