critical9.8
CVE-2024-40539
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.
Impact
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codermy | My-Springsecurity-Plus | before 2024.07.03 |