SQL Injection

org.geotools.jdbc, gt-jdbc-postgis is vulnerable to SQL injection. The vulnerability is due to the jsonArrayContains function failing to escape user-supplied values in generated SQL queries, which allows an attacker to inject malicious SQL through OGC filters when using the PostGIS DataStore with...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the jsonArrayContains function. An attacker can execute arbitrary SQL statements by supplying crafted input to the filter, which is incorporated into SQL queries without proper escaping. Remediation Upgrade...