Codermy

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Codermy records in CISA KEV

No Codermy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in My-springsecurity-plus · all components

TI-2024-26988 CVE-2024-40542 · GHSA-r6rq-ppp9-f5c4

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2024-07-12 No fix listed CWE-89

TI-2024-26987 CVE-2024-40541 · GHSA-8387-wp6q-pgrv

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00431 Published 2024-07-12 No fix listed CWE-89

TI-2024-26986 CVE-2024-40540 · GHSA-7xgj-q868-4w2x

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00456 Published 2024-07-12 No fix listed CWE-89

TI-2024-26985 CVE-2024-40539 · GHSA-9r5f-hprw-c6j9

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2024-07-12 No fix listed CWE-89