Lucene search

GoogleOSV:GHSA-XR4V-28RM-PVGW

HistoryMay 17, 2022 - 2:37 a.m.

Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

2022-05-1702:37:09

Google

osv.dev

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.8%

JSON

SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.

CPENameOperatorVersion
org.springframework.data:spring-data-jpaeq1.2.1.RELEASE
org.springframework.data:spring-data-jpaeq1.4.4.RELEASE
org.springframework.data:spring-data-jpaeq1.8.0.RC1
org.springframework.data:spring-data-jpaeq1.9.0.RELEASE
org.springframework.data:spring-data-jpaeq1.5.3.RELEASE
org.springframework.data:spring-data-jpaeq1.10.3.RELEASE
org.springframework.data:spring-data-jpaeq1.6.4.RELEASE
org.springframework.data:spring-data-jpaeq1.5.2.RELEASE
org.springframework.data:spring-data-jpaeq1.9.5.RELEASE
org.springframework.data:spring-data-jpaeq1.1.0.RELEASE

Name	Operator	Version
org.springframework.data:spring-data-jpa	eq	1.2.1.RELEASE
org.springframework.data:spring-data-jpa	eq	1.4.4.RELEASE
org.springframework.data:spring-data-jpa	eq	1.8.0.RC1
org.springframework.data:spring-data-jpa	eq	1.9.0.RELEASE
org.springframework.data:spring-data-jpa	eq	1.5.3.RELEASE
org.springframework.data:spring-data-jpa	eq	1.10.3.RELEASE
org.springframework.data:spring-data-jpa	eq	1.6.4.RELEASE
org.springframework.data:spring-data-jpa	eq	1.5.2.RELEASE
org.springframework.data:spring-data-jpa	eq	1.9.5.RELEASE
org.springframework.data:spring-data-jpa	eq	1.1.0.RELEASE

Rows per page:

1-10 of 491

References

www.securityfocus.com/bid/93276

github.com/spring-projects/spring-data-jpa/commit/b8e7fe

jira.spring.io/browse/DATAJPA-965

nvd.nist.gov/vuln/detail/CVE-2016-6652

pivotal.io/security/cve-2016-6652

security.gentoo.org/glsa/201701-01

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.8%

JSON

Related for OSV:GHSA-XR4V-28RM-PVGW