PT-2026-27166 · Erupts · Erupts

Vuldb + 1 · Publicado 2026-03-23 · Atualizado 2026-03-23 · CVE-2026-4594

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions erupts versions through 1.13.3

Description A flaw exists in the geneEruptHqlOrderBy function located in the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Manipulation of the sort.field argument can lead to a SQL injection vulnerability within Hibernate. This issue is remotely exploitable. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations Versions prior to 1.13.3 should be updated. As a temporary workaround, consider restricting or disabling the use of the geneEruptHqlOrderBy function until a patch is available. Avoid using the sort.field parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-564

CWE-89

Identificadores relacionados

CVE-2026-4594

Produtos afetados

Erupts

Referências · 5

• 🔥 https://fx4tqqfvdw4.feishu.cn/docx/ETWUdbPk1oCC56xoEWHc3Q28nEc?from=from_copylink · Exploit
• https://vuldb.com/?id.352431 · Nota
• https://vuldb.com/?submit.775594 · Nota
• https://vuldb.com/?ctiid.352431 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4594 · Nota de Segurança