Security Advisory
CVE-2024-40542
9.8
CRITICAL
Vulnerability Description
my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.
Published Date
July 12, 2024
Official Source
NIST NVD Advisory