br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

GHSA-4926-QPXG-6R3W Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

GHSA-9QF9-28H9-HQCJ Remote code execution in PATCH requests in Spring Data REST

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 can use specially crafted JSON data to run arbitrary Java code...

Remote code execution in PATCH requests in Spring Data REST

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 can use specially crafted JSON data to run arbitrary Java code...

org.springframework.data:spring-data-rest-hal-browser (3.0.0.release), org.springframework.data:spring-data-rest-webmvc (3.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (3.0.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

org.springframework.data:spring-data-rest-hal-browser (3.0.0.release), org.springframework.data:spring-data-rest-webmvc (3.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (3.0.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), br.com.intelipost:sdk-java (>=0.0.1, <=0.0.8) +69 more potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (>=2.0.0.release, <=2.6.8.release)

org.springframework.data:spring-data-rest-core MAVEN version =2.0.0.release, =1.0.0, =0.0.1, =2.3.0-release, =0.0.6, =0.0.1, =0.0.1, =1.0.0, =79, =92 - com.heapbrain:heapaudit 1.0.0 and more Source cves: CVE-2017-8046 Source advisory: OSV:GHSA-9QF9-28H9-HQCJ...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), br.com.intelipost:sdk-java (>=0.0.1, <=0.0.8) +69 more potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (>=2.0.0.release, <=2.6.8.release)

org.springframework.data:spring-data-rest-core MAVEN version =2.0.0.release, =1.0.0, =0.0.1, =2.3.0-release, =0.0.6, =0.0.1, =0.0.1, =1.0.0, =79, =92 - com.heapbrain:heapaudit 1.0.0 and more Source cves: CVE-2017-8046 Source advisory: GHSA-9QF9-28H9-HQCJ...

org.springframework.data:spring-data-rest-repository (1.0.0.release), org.springframework.data:spring-data-rest-webmvc (1.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (1.0.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-repository...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

Design/Logic Flaw

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

CVE-2021-22047 affects Spring Data REST: HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are exposed under URIs that may be accessible without authorization, depending on Spring Security configuration.impact is describe...