critical9.8
CVE-2024-40542
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.
Impact
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codermy | My-Springsecurity-Plus | before 2024.07.03 |