{"action":"Upgrade com.github.pagehelper:pagehelper to 5.3.1 or later.","affected":[{"fixed":"5.3.1","introduced":"3.5.0"}],"component":"com.github.pagehelper:pagehelper","cve_ids":["CVE-2022-28111"],"ecosystem":"Maven","epss":0.01731,"exploited":false,"fixed_versions":["5.3.1"],"ghsa_id":"GHSA-w559-623p-vfg8","id":"tcs_01M5N9FKHDXRNBJC481WYR92JG","modified_at":"2024-02-17T05:33:57.079803Z","published_at":"2022-05-05T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-w559-623p-vfg8","https://nvd.nist.gov/vuln/detail/CVE-2022-28111","https://github.com/pagehelper/Mybatis-PageHelper/issues/674","https://github.com/pagehelper/Mybatis-PageHelper/commit/554a524af2d2b30d09505516adc412468a84d8fa","https://github.com/pagehelper/Mybatis-PageHelper","https://github.com/pagehelper/Mybatis-PageHelper.git","https://github.com/yangfar/CVE/blob/main/CVE-2022-42227.md","https://pagehelper.github.io","https://www.cnblogs.com/secload/articles/16061420.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w559-623p-vfg8","url":"https://osv.dev/vulnerability/GHSA-w559-623p-vfg8"}],"summary":"MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter"}