CVE-2016-11024

odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-30

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Odata4j (Odata4j Project)

References

• https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ