AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor’s position is that the reported execution of a SQL statement was intended behavior.
github.com/baomidou/mybatis-plus/issues/4407
github.com/HaHarden/mybatis-plus-sql-Injection