My Springsecurity Plus

my-springsecurity-plus

Vendor: Codermy • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-40542 1Codermy 1My Springsecurity Plus Jun 17, 2026 Jul 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.
CVE-2024-40541 1Codermy 1My Springsecurity Plus Jun 17, 2026 Jul 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.
CVE-2024-40540 1Codermy 1My Springsecurity Plus Jun 17, 2026 Jul 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.
CVE-2024-40539 1Codermy 1My Springsecurity Plus Jun 17, 2026 Jul 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.