CVE-2026-125381 | gcpaas DataRoom up to 3.0.0 MyBatisService MyBatisService.generateSql inputParam sql injection

SecurityVulns

A vulnerability was found in gcpaas DataRoom up to 3.0.0. It has been rated as critical. This impacts the function MyBatisService.generateSql of the component MyBatisService. The manipulation of the argument inputParam leads to sql injection.

This vulnerability is referenced as CVE-2026-125381. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More