SQLi in Mapper v4.0.0v4.2.0 via ids in selectByIds
CVE-2022-36594 Published on September 2, 2022
Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.
Products Associated with CVE-2022-36594
Want to know whenever a new CVE is published for Mybatis Mapper? stack.watch will email you.
Exploit Probability
EPSS
0.31%
Percentile
54.48%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.