Description
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.
Medium · 6.2
CVE-2024-40539
EUVD-2024-38507GHSA-9r5f-hprw-c6j9
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.
Published Jul 12, 2024 · Updated Aug 2, 2024 · Assigned by mitre