Skip to content
OpenAdvisories

Vendor

erupts

4 known vulnerabilities.

Products

erupt 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-124504

    erupts erupt ReportService.java ReportService.queryBiData sql injection

    A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be ca…

    erupts erupt
  • Medium 5.3
    CVE-2026-111390

    Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

    Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permissi…

    erupts erupt
  • Medium 6.3
    CVE-2026-4593

    erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection

    A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability is the function EruptDataQuery of the file erupt-ai/src/main/java/xyz/erupt/ai/call/impl/EruptDataQuery.java of the component MCP Tool Interface. This manipulation causes sql inj…

    erupts erupt