PatchTheCVE: my-springsecurity-plushttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-40542: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40542.htmlhttps://patchthecve.com/cve/CVE-2024-40542.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.CVE-2024-40541: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40541.htmlhttps://patchthecve.com/cve/CVE-2024-40541.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.CVE-2024-40540: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40540.htmlhttps://patchthecve.com/cve/CVE-2024-40540.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.CVE-2024-40539: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40539.htmlhttps://patchthecve.com/cve/CVE-2024-40539.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.CVE-2024-6681: A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-0https://patchthecve.com/cve/CVE-2024-6681.htmlhttps://patchthecve.com/cve/CVE-2024-6681.htmlWed, 17 Jun 2026 08:18:28 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this issue is some unknown functionality of the file /api/dept. The manipulation of the argument params.dataScope leads to sql injection. The attack may be launched remotelCVE-2024-6680: A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04https://patchthecve.com/cve/CVE-2024-6680.htmlhttps://patchthecve.com/cve/CVE-2024-6680.htmlWed, 17 Jun 2026 08:18:28 +0000MEDIUM 6.3: A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this vulnerability is an unknown functionality of the file /api/dept/build. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely. ThCVE-2024-6679: A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04https://patchthecve.com/cve/CVE-2024-6679.htmlhttps://patchthecve.com/cve/CVE-2024-6679.htmlWed, 17 Jun 2026 08:18:28 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been CVE-2024-6676: A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as criticalhttps://patchthecve.com/cve/CVE-2024-6676.htmlhttps://patchthecve.com/cve/CVE-2024-6676.htmlWed, 17 Jun 2026 08:18:27 +0000MEDIUM 6.3: A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/user. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely.