The vulnerability of the JPA Criteria API interface of the Hibernate ORM query service allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the JPA Criteria API interface of the Hibernate ORM query service is related to the lack of mechanisms to protect the structure from SQL injection attacks. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data and compromis...