Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2022-25517
HistoryMar 22, 2022 - 12:00 a.m.

CVE-2022-25517

2022-03-2200:00:00
mitre
github.com
1
mybatis plus v3.4.3
sql injection
column parameter
abstractwrapper.java

AI Score

8.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor’s position is that the reported execution of a SQL statement was intended behavior.

AI Score

8.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2022-25517