Threats tagged 'ghsa-7hx2-hqrg-qcwc'

A SQL injection vulnerability exists in YunaiV yudao-cloud up to version 2026.01 in the getDataBySQL function of GoViewDataServiceImpl.java. This vulnerability allows remote attackers with limited privileges to manipulate SQL queries, potentially leading to data confidentiality, integrity, and availability impacts. Public exploit code is available, but no vendor response or patch has been provided.