Mybatis

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mybatis records in CISA KEV

No Mybatis vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Mapper · all components

TI-2022-16899 CVE-2022-36594 · GHSA-7mpq-hfgq-f4jg

MEDIUM 44

Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00921 Published 2022-09-02 No fix listed CWE-89