ai.ylyue:yue-library-data-es (j11.2.6.2), ai.ylyue:yue-library-data-mybatis (j11.2.6.2) +2442 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (>=3.0-alpha, <=3.5.3)

com.baomidou:mybatis-plus MAVEN version =3.0-alpha, =0.3.0, =0.4.0, =3.0.5, =1.7.2, =1.7.2, =1.0.4.r, =1.0.4.r, =1.0.4.r, =1.0.0, =1.1.2 and more Source cves: CVE-2023-25330 Source advisory: GHSA-32QQ-M9FH-F74W...

com.baomidou:mybatisplus-spring-boot-starter (1.0.3) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1-beta)

com.baomidou:mybatis-plus MAVEN version 2.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.3 Source cves: CVE-2023-25330 Source advisory:...

io.github.rcarlosdasilva:cogen (0.1) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1.0)

com.baomidou:mybatis-plus MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - io.github.rcarlosdasilva:cogen 0.1 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

com.github.dennisit:vplus-core (1.1.3), com.github.dennisit:vplus-data (1.1.3) +3 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1.1)

com.baomidou:mybatis-plus MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.github.dennisit:vplus-core 1.1.3 - com.github.dennisit:vplus-data 1.1.3 - com.github.dennisit:vplus-html...

cn.bestwu.simpleframework:simpleframework-core (>=0.1.15, <=0.1.17), cn.stylefeng.guns:guns-generator (1.0.0) +31 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3)

com.baomidou:mybatis-plus MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:simpleframework-core =0.1.15, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

GHSA-32QQ-M9FH-F74W MyBatis-Plus vulnerable to SQL injection via TenantPlugin

MyBatis-Plus below 3.5.3.1 is vulnerable to SQL injection via the tenant ID value. This may allow remote attackers to execute arbitrary SQL commands...

com.baomidou:spring-wind (1.1.5) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.4.8)

com.baomidou:mybatis-plus MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:spring-wind 1.1.5 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

com.baomidou:mybatis-plus-boot-starter (2.3.1) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.1)

com.baomidou:mybatis-plus MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatis-plus-boot-starter 2.3.1 Source cves: CVE-2023-25330 Source advisory:...

com.github.dennisit:vplus-data (1.1.5), com.github.dennisit:vplus-tutorial (1.1.5) +10 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1.6)

com.baomidou:mybatis-plus MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.github.dennisit:vplus-data 1.1.5 - com.github.dennisit:vplus-tutorial 1.1.5 - com.wichell:framework-dao...

com.javaear:generalmapper (>=1.0.0, <=1.2.0) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.4.6)

com.baomidou:mybatis-plus MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.javaear:generalmapper =1.0.0, =1.2.0 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

com.baomidou:mybatisplus-spring-boot-starter (1.0.1), com.github.dennisit:vplus-core (1.1.2) +4 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.0.8)

com.baomidou:mybatis-plus MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.1 - com.github.dennisit:vplus-core 1.1.2 -...

cn.bestwu.simpleframework:core (>=0.0.1, <=0.1.3), cn.stylefeng.roses:kernel-generator (>=1.0.0, <=1.1.2) +16 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1.9)

com.baomidou:mybatis-plus MAVEN version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:core =0.0.1, =1.0.0, =1.0.2, =1.0.2, =1.0.5, =1.2.5, =1.0.4, =1.0.4, =1.0.7, =1.0.4...

com.github.dennisit:vplus-data (1.1.4), com.github.dennisit:vplus-tutorial (1.1.4) +3 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1.4)

com.baomidou:mybatis-plus MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.github.dennisit:vplus-data 1.1.4 - com.github.dennisit:vplus-tutorial 1.1.4 -...

com.baomidou:spring-wind (>=1.0, <=1.1) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.2.11)

com.baomidou:mybatis-plus MAVEN version 1.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:spring-wind =1.0, =1.1 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

cn.bestwu.simpleframework:simpleframework-data-mybatis (>=0.1.31, <=0.1.33), com.baomidou:mybatis-plus-boot-starter (2.3.3) +2 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.3)

com.baomidou:mybatis-plus MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:simpleframework-data-mybatis =0.1.31, =1.1.18-release, =1.1.0-release,...

MyBatis-Plus vulnerable to SQL injection via TenantPlugin

MyBatis-Plus below 3.5.3.1 is vulnerable to SQL injection via the tenant ID value. This may allow remote attackers to execute arbitrary SQL commands...

com.baomidou:spring-wind (1.1.4) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (1.2.18)

com.baomidou:mybatis-plus MAVEN version 1.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:spring-wind 1.1.4 Source cves: CVE-2023-25330 Source advisory: OSV:GHSA-32QQ-M9FH-F74W...

CVE-2023-25330

A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoi...

CVE-2023-25330

A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoi...

CVE-2023-25330

A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoi...