Odata4J · Odata4J · CVE-2016-11023
Name of the Vulnerable Software and Affected Versions:
odata4j version 0.7.0
Description:
The issue allows SQL injection through the ExecuteCountQueryCommand.java file. It is noted that the product odata4j is apparently discontinued.
Recommendations:
For odata4j version 0.7.0, consider disabling the ExecuteCountQueryCommand.java function to prevent SQL injection until further action can be taken, however, since the product is discontinued, there is no information about a newer version that contains a fix for this issue.