~ / search / GHSA-32qq-m9fh-f74w

GHSA-32qq-m9fh-f74w

MyBatis-Plus vulnerable to SQL injection via TenantPlugin

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-25330

Packages

EcosystemPackageAffectedFixed in
Maven com.baomidou:mybatis-plus < 3.5.3.1 3.5.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

MyBatis-Plus below 3.5.3.1 is vulnerable to SQL injection via the tenant ID value. This may allow remote attackers to execute arbitrary SQL commands.

References

External links from the advisory. They lead to third-party sites.