Threats tagged 'ghsa-4mm4-mwxf-r2wr'

A SQL injection vulnerability exists in java110 MicroCommunity up to version 2.0 in the fallBack API Endpoint, specifically in the QueryServiceSMOImpl.fallBack function of BusinessApi.java. This vulnerability allows remote attackers to manipulate the fallBackSql argument, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. The project has been informed but has not yet responded or issued a patch. Public exploit code is available, but no known exploitation in the wild has been reported.