CVE-2024-35548 — n/a / n/a

Description (CNA)

A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database information via a Boolean blind injection. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/baomidou/mybatis-plus/issues/6167
https://baomidou.com/reference/about-cve/

ADP enrichment

CVE

No English description supplied.

https://github.com/baomidou/mybatis-plus/issues/6167
https://baomidou.com/reference/about-cve/

CISA-ADP

No English description supplied.

No references supplied.