Unscored CVE-2022-25517 EUVD-2022-30180GHSA-4m48-j3xj-px27

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.ja…

Published Mar 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior.

References

https://github.com/HaHarden/mybatis-plus-sql-Injection
https://github.com/baomidou/mybatis-plus/issues/4407