Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA

🗓️ 14 May 2019 04:35:02Reported by GitHub Advisory DatabaseType

Exposure of Sensitive Information in Spring Data JP

Reporter	Title	Published	Views	Family All 8
RedhatCVE	CVE-2019-3797	8 Apr 201919:19	–	redhatcve
NVD	CVE-2019-3797	6 May 201916:29	–	nvd
CVE	CVE-2019-3797	6 May 201916:29	–	cve
Veracode	Information Disclosure	9 Apr 201902:26	–	veracode
Prion	Input validation	6 May 201916:29	–	prion
OSV	Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA	14 May 201904:02	–	osv
Cvelist	CVE-2019-3797 Additional information exposure with Spring Data JPA derived queries	6 May 201915:21	–	cvelist
RedHat Linux	(RHSA-2020:3192) Important: Red Hat Fuse 7.7.0 release and security update	28 Jul 202015:50	–	redhat

Vulners

Node

org.springframework.data spring-data-jpaRange2.1.0–2.1.6

org.springframework.data spring-data-jpaRange2.0.0–2.0.14

org.springframework.data spring-data-jpaRange<1.11.20

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-3797
pivotal	www.pivotal.io/security/cve-2019-3797
github	www.github.com/advisories/GHSA-jgmr-wrwx-mgfj

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo