Skip to content
OpenAdvisories

Vendor

pig-mesh

5 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 6.3

    pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

    A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argume…

  • Medium 4.3

    pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}

    pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}. Low-privilege attackers can enumerate sequential user ids to obtain u…

  • Medium 6.3

    pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection

    A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pig4cloud\pig\codegen\service\impl\GeneratorServiceImpl.java of the component pig…