Vulnerabilities > Baomidou > Mybatis Plus > 3.4.3

DATE CVE VULNERABILITY TITLE RISK
2022-03-22 CVE-2022-25517 SQL Injection vulnerability in Baomidou Mybatis-Plus 3.4.3
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java.
network
low complexity
baomidou CWE-89
critical
9.8