CVE-2024-49203

—

CVSS

—

EPSS

<1%p34

Published

Nov 20, 2024 (Nov 20, 2024)

Modified

Jun 17, 2026

Description

Querydsl 5.1.0 and OpenFeign Querydsl 6.8 allows SQL/HQL injection in orderBy in JPAQuery. NOTE: this is disputed by a Querydsl community member because the product is not intended to defend against a developer who uses untrusted input directly in query construction.

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.