Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer.
Advisories for Maven/Com.baomidou/Mybatis-Plus package
2023