Description
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Remediation
References
https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
Related Vulnerabilities
CVE-2017-3161 Vulnerability in maven package org.apache.hadoop:hadoop-hdfs
CVE-2022-28820 Vulnerability in maven package com.adobe.acs:acs-aem-commons-ui.apps
CVE-2015-2575 Vulnerability in maven package mysql:mysql-connector-java
CVE-2022-24433 Vulnerability in maven package org.webjars.npm:simple-git
CVE-2023-3442 Vulnerability in maven package io.jenkins.plugins:servicenow-devops