Lucene search
Veracode Vulnerability DatabaseVERACODE:40326HistoryApr 28, 2023 - 4:07 a.m.
SQL Injection
2023-04-2804:07:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
sql injection
mybatis-plus-extension
tenantlineinnerinterceptor
arbitrary sql queries
software
0.001 Low
EPSS
Percentile
48.9%
com.baomidou:mybatis-plus-extension is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the tenant ID parameter in TenantLineInnerInterceptor.java allows a malicious user to inject and execute arbitrary SQL queries on the target system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mybatis-plus | le | 3.5.3 | |
| mybatis-plus | le | 3.5.3 |
Related
prion
prion
Sql injection
2023-04-05 14:15:00
cvelist
cvelist
CVE-2023-25330
2023-04-05 00:00:00
cve
cve
CVE-2023-25330
2023-04-05 14:15:07
nvd
nvd
CVE-2023-25330
2023-04-05 14:15:07
vulnrichment
vulnrichment
CVE-2023-25330
2023-04-05 00:00:00
github
github
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
2023-04-05 15:30:24
osv
osv
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
2023-04-05 15:30:24