Vulnerability CVE-2023-25330


Published: 2023-04-05

Description:
A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer.

 References:
https://github.com/FCncdn/MybatisPlusTenantPluginSQLInjection-POC/blob/master/Readme.en.md

Copyright 2026, cxsecurity.com

 

Back to Top