Beveiligingsadvies

CVE-2026-22730

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-18 07:36:30
Laatst bijgewerkt 2026-03-19 03:55:21
Toegewezen door vmware
CVSS-score 8.8
Status PUBLISHED

Beschrijving

A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.