CVE-2026-111390

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

CVE-2026-111390

Erupt through version 2.3.0 is vulnerable to an HQL injection vulnerability in the Data Table API . The flaw exists because the linkTreeVal parameter in the POST /erupt-api/data/table/{erupt} endpoint fails to sanitize unescaped quotes. This allows authenticated users with query permissions on en...

CVE-2026-111390

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

EUVD-2026-102844

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

PT-2026-115583

Name of the Vulnerable Software and Affected Versions Erupt versions prior to 2.3.1 Description Authenticated users can bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of the POST '/erupt-api/data/table/erupt' endpoint. This HQL Hibernate Query Languag...

CVE-2026-111390: SQL Injection: Hibernate

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

YuePeng has a SQL injection vulnerability

YuePeng ERUPT: Versions 2.3.0 and earlier have a SQL injection vulnerability. This vulnerability arises from failing to escape the linkTreeVal parameter in the POST request for /erupt-api/data/table/erupt, allowing HQL injection. This may enable authenticated users to bypass the tree scope data...