CVE-2022-36594

CRITICAL CVSS: 9.8 Published: 2022-09-02 Modified: 2026-06-17

Description

Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.

Affected Platforms

Mybatis Mapper

Weakness Type

CWE-89

References