Skip to content
OpenAdvisories

Vendor

erupts

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.3

    erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection

    A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this issue is the function geneEruptHqlOrderBy of the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Such manipulation of the argument sort.field leads to …