Sql injection

Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function...

CVE-2022-36594

CVE-2022-36594 concerns Mapper, a Java persistence framework by Liuzh. Vulnerable ranges are Mapper 4.0.0 through 4.2.0, with a SQL injection via the ids parameter in the selectByIds function. The NVD entry cites a high/critical impact (CVSS v3.1: 9.8; NETWORK, LOW complexity, no user interaction...