SQL Injection

2022-03-2304:35:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sql injection

mybatis-plus-core

abstractwrapper.java

software

attack statement

EPSS

0.002

Percentile

52.3%

JSON

com.baomidou:mybatis-plus-core is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the column parameter in AbstractWrapper.java allows a malicious user to inject and execute arbitrary SQL queries on the target system.