Description
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.
Medium · 6.2
CVE-2024-40540
EUVD-2024-38508GHSA-7xgj-q868-4w2x
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.
Published Jul 12, 2024 · Updated Aug 2, 2024 · Assigned by mitre