Vulnerabilities

TI-2024-26988 CVE-2024-40542 · GHSA-r6rq-ppp9-f5c4

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection…

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2024-07-12 No fix listed CWE-89

TI-2024-26987 CVE-2024-40541 · GHSA-8387-wp6q-pgrv

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00431 Published 2024-07-12 No fix listed CWE-89

TI-2024-26986 CVE-2024-40540 · GHSA-7xgj-q868-4w2x

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00456 Published 2024-07-12 No fix listed CWE-89

TI-2024-26985 CVE-2024-40539 · GHSA-9r5f-hprw-c6j9

HIGH 75

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2024-07-12 No fix listed CWE-89