GitHub Advisoryadvisory · Maven

GHSA-j7m2-58wv-9v79 Vulnerability in Torpedo Query

CRITICAL Published 2022-02-10 Modified 2021-10-05 Official page ↗
Aliases
CVE-2019-11343
Ecosystem
Maven
Packages
org.torpedoquery:org.torpedoquery
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2021-05-03

Affected packages

• Maven org.torpedoquery:org.torpedoquery: < 2.5.3 → fixed in 2.5.3

Description

Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.

Related

Alias · CVE (1)

  • CVE-2019-11343 Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java. vulnerability

References