Description
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.odata4j:odata4j-core | <= 0.7.0 | — | GHSA-f96g-24cg-f24w |
| Maven | org.odata4j:odata4j-dist | <= 0.7.0 | — | GHSA-f96g-24cg-f24w |
| Maven | org.odata4j:odata4j-parent | <= 0.7.0 | — | GHSA-f96g-24cg-f24w |