CVE-2016-11024 SQL Injection in odata4j
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.odata4j/odata4j-core(Maven) | <= 0.7.0 | No fix listed |
| org.odata4j/odata4j-dist(Maven) | <= 0.7.0 | No fix listed |
| org.odata4j/odata4j-parent(Maven) | <= 0.7.0 | No fix listed |
| org.odata4j/odata4j-core(Maven) | = 0.6.0 | No fix listed |
| org.odata4j/odata4j-core(Maven) | = 0.7.0 | No fix listed |
| org.odata4j/odata4j-dist(Maven) | = 0.6.0 | No fix listed |
| org.odata4j/odata4j-dist(Maven) | = 0.7.0 | No fix listed |
| org.odata4j/odata4j-parent(Maven) | = 0.6.0 | No fix listed |
| org.odata4j/odata4j-parent(Maven) | = 0.7.0 | No fix listed |
| odata4j project odata4j | = 0.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- groups.google.com third-party-advisory
- github.com