critical9.8
CVE-2024-40541
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.
Impact
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codermy | My-Springsecurity-Plus | before 2024.07.03 |