CVE-2026-125381

MEDIUM 5.3

DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSql

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

DataRoom through 3.0.0 contains an sql injection vulnerability in MyBatisService.generateSql that allows sharer-role users to inject SQL by supplying crafted dataset parameters. Attackers can send crafted inputParam values to /dataRoom/dataset/run, exploiting unquoted string parameters or MySQL backslash escapes, to execute injected SQL against the database.

CWE	CWE-89
Vendor	gcpaas
Product	dataroom
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for gcpaas dataroom

Be the first to know when new medium vulnerabilities affecting gcpaas dataroom are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

gcpaas / DataRoom

0 ≤ 3.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/gcpaas/DataRoom/issues/25 github.com: https://github.com/gcpaas/DataRoom github.com: https://github.com/gcpaas/DataRoom/blob/3.0.0/dataRoomServer/src/main/java/com/gccloud/gcpaas/dataroom/core/dataset/service/MyBatisService.java#L38-L66 github.com: https://github.com/gcpaas/DataRoom/commit/d155312b23a91e39e5e934e3e2d2deede650b92b vulncheck.com: https://www.vulncheck.com/advisories/dataroom-through-3.0.0-sql-injection-via-mybatisservice-generatesql

Credits

hieuPenguinnn