com.baomidou:mybatis-plus-core@3.0.7.1 vulnerabilities
latest version
3.5.9
first published
7 years ago
latest version published
2 months ago
licenses detected
- [2.1.6,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.baomidou:mybatis-plus-core package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to SQL Injection due to improper user-input sanitization, via the column parameter in Impact: Based on the PoC, this vulnerability only impacts Confidentiality and the attacker does not have control over what kind of information they are able to access. Projects implementing this module will likely require authorization for running queries. Note: According to the maintainers, this is not to be considered an issue within the current library but with projects implementing it. Developers should perform sanitization checks when handling input from the front end and can use this class for verification purposes. How to fix SQL Injection? There is no fixed version for | [0,) |