My Springsecurity Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:witmy:my-springsecurity-plus:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Witmy (627d449b-4eab-53d0-84fc-46a65064a0d3) |
|---|---|
| Product | My Springsecurity Plus (41fe55fb-c474-5087-9548-efab973ce704) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/witmy/my-springsecurity-plus |
purl2cpe | 2026-06-01 10:11:57.324013 |
pkg:github/witmy/my-springsecurity-plus |
purl2cpe | 2026-06-01 10:11:57.324015 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6681 |
vulnerable | 2026-06-08 06:58:20.166325 |
witmy my-springsecurity-plus dept sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this issue is some unknown functionality of the file /api/dept. The manipulation of the argument params.dataScope leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271154 is the identifier assigned to this vulnerability.
Published: 2024-07-11T16:31:10.263Z
Updated: 2024-08-01T21:41:04.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6680 |
vulnerable | 2026-06-08 06:58:20.165700 |
witmy my-springsecurity-plus build sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this vulnerability is an unknown functionality of the file /api/dept/build. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271153 was assigned to this vulnerability.
Published: 2024-07-11T16:00:09.662Z
Updated: 2024-08-01T21:41:04.303Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6679 |
vulnerable | 2026-06-08 06:58:20.165142 |
witmy my-springsecurity-plus role sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271152.
Published: 2024-07-11T15:00:11.027Z
Updated: 2024-08-01T21:41:04.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6676 |
vulnerable | 2026-06-08 06:58:20.160990 |
witmy my-springsecurity-plus user sql injection
MEDIUM (6.3)
A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/user. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-271111.
Published: 2024-07-11T02:00:10.857Z
Updated: 2024-08-01T21:41:04.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40542 |
vulnerable | 2026-06-08 06:43:52.359282 |
Details available
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.
Published: 2024-07-12T00:00:00.000Z
Updated: 2024-08-02T04:33:11.696Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40541 |
vulnerable | 2026-06-08 06:43:52.358625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40539 |
vulnerable | 2026-06-08 06:43:52.356604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.