Skip to content
OpenAdvisories

Package · Maven

com.baomidou:mybatis-plus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2023-25330

    MyBatis-Plus vulnerable to SQL injection via TenantPlugin

    A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses…

    com.baomidou:mybatis-plus Maven