Description
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
Remediation
References
https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
Related Vulnerabilities
CVE-2018-15685 Vulnerability in maven package org.webjars.npm:electron
CVE-2019-3580 Vulnerability in maven package org.openrefine:openrefine
CVE-2023-5245 Vulnerability in maven package ml.combust.bundle:bundle-ml_2.12
CVE-2018-3778 Vulnerability in npm package aedes
CVE-2018-20834 Vulnerability in maven package org.webjars.npm:tar