CVE-2022-31679

🗓️ 21 Sep 2022 17:42:42Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 72 Views

Applications allowing HTTP PATCH access can expose hidden entity attributes in Spring Data REST 3.6.0 - 3.5.5, 3.7.0 - 3.7.2

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
Circl	CVE-2022-31679	21 Sep 202222:41	–	circl
CNNVD	VMware Spring Data REST 安全漏洞	21 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-31679	21 Sep 202217:42	–	cvelist
EUVD	EUVD-2022-6811	3 Oct 202520:07	–	euvd
Github Security Blog	Spring Data REST can expose hidden entity attributes	22 Sep 202200:00	–	github
NVD	CVE-2022-31679	21 Sep 202218:15	–	nvd
OSV	CVE-2022-31679	21 Sep 202218:15	–	osv
OSV	GHSA-FV7X-V67W-CVQV Spring Data REST can expose hidden entity attributes	22 Sep 202200:00	–	osv
Prion	Code injection	21 Sep 202218:15	–	prion

NVD

Node

vmware spring_data_restRange3.6.0–3.6.7

vmware spring_data_restRange3.7.0–3.7.3

[
  {
    "product": "Spring Data REST",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Data REST Versions before 3.6.7 and 3.7.3"
      }
    ]
  }
]