Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.

Published Sep 2, 2022 · Updated Aug 3, 2024 · Assigned by mitre