Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/03/21 3:36 a.m.15 views

SQL injection in Folio Spring Module Core

A vulnerability was found in Folio Spring Module Core before 2.0.0. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the component Schema Name Handler. The manipulation leads to sql injection...

9.8CVSS7.5AI score0.0011EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2024/03/21 3:36 a.m.10 views

GHSA-4H5H-P23F-HJQF SQL injection in Folio Spring Module Core

A vulnerability was found in Folio Spring Module Core before 2.0.0. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the component Schema Name Handler. The manipulation leads to sql injection...

5.5CVSS7.7AI score0.0011EPSS
Exploits0References6
NVD
NVD
added 2024/03/21 2:44 a.m.7 views

CVE-2022-4963

A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the component Schema Name Handler. The manipulation...

9.8CVSS6AI score0.0011EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/03/21 12:0 a.m.3 views

Spring Module Core SQL注入漏洞

Spring Module Core is a FOLIO open source Spring Module Core library developed using Okapi. Spring Module Core version 1.1.5 SQL injection vulnerability , the vulnerability stems from the component Schema Name Handler function dropSchema will lead to SQL injection...

9.8CVSS6.1AI score0.0011EPSS
Exploits0References6
CVE
CVE
added 2024/03/20 6:31 p.m.55 views

CVE-2022-4963

CVE-2022-4963 affects Folio Spring Module Core up to version 1.1.5. The vulnerability is a SQL injection in the dropSchema function of HibernateSchemaService.java (Schema Name Handler). Root cause: improper handling in dropSchema leads to injection risk. Upgrading to version 2.0.0 addresses the i...

9.8CVSS5.9AI score0.0011EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2024/03/20 6:31 p.m.12 views

CVE-2022-4963 Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection

A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the component Schema Name Handler. The manipulation...

5.5CVSS6.3AI score0.0011EPSS
Exploits0References5
Rows per page
Query Builder