Description
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Remediation
References
https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
Related Vulnerabilities
CVE-2018-1335 Vulnerability in maven package org.apache.tika:tika-core
CVE-2016-3092 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2022-1330 Vulnerability in maven package org.webjars.bowergithub.alvarotrigo:fullpage.js
CVE-2017-12160 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2022-43435 Vulnerability in maven package org.jenkins-ci.plugins.plugin:fireline