Threats affecting pkg:maven/com.dromara/maxkey

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-7699Dromara MaxKey · SQL Injection Medium5.3EPSS 0.2%2026-05-03CVE Database V5CVE-2026-7699 Dromara MaxKey versions up to 3.5.13 contain a SQL injection vulnerability in the StrUtils.checkSqlInjection function within StrUtils.java. The issue arises from improper handling of the filtersfields argument, allowing remote attackers to manipulate SQL queries. An exploit has been publicly released, but the vendor has not responded or provided a fix. The vulnerability has a medium severity rating with a CVSS score of 5.3. EPSS 0.2%Vulnerability	CVE Database V5	2026-05-03

Page 1 of 1