PT-2026-108109

Name of the Vulnerable Software and Affected Versions JHipster versions 7.0.0 through 9.3.x Description Reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database are susceptible to SQL injection. The issue occurs because the sort request parameter in paginated...

PT-2026-108672

SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManager reactive.java.e...

Ever wanted to rewrite a query in Spring Data JPA?

Sometimes, no matter how many features you try to apply, it seems impossible to get Spring Data JPA to apply every thing youd like to a query before it is sent to the EntityManager. With 3.0.0-SNAPSHOT and targeted for the next milestone release train of Spring Data, you now have the ability to g...

CVE-2022-24815

CVE-2022-24815 affects JHipster-generated applications that use a SQL database with reactive Spring WebFlux. The vulnerability resides in the entity repository’s findAllBy(Pageable, Criteria) where clause, where Criteria.toString() is not sanitized and user input is passed through directly, enabl...

SQL Injection when creating an application with Reactive SQL backend

Impact SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL database using r2dbc. Applications created without "reactive with Spring WebFlux" and applications with NoSQL databases are not affected. If you have generat...

org.hibernate:hibernate-c3p0 (4.3.0.cr2), org.hibernate:hibernate-ehcache (4.3.0.cr2) +9 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.3.0.cr2)

org.hibernate:hibernate-core MAVEN version 4.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.3.0.cr2 - org.hibernate:hibernate-ehcache 4.3.0.cr2 -...

org.hibernate:hibernate-c3p0 (4.0.0.alpha1), org.hibernate:hibernate-ehcache (4.0.0.alpha1) +4 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.0.0.alpha1)

org.hibernate:hibernate-core MAVEN version 4.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.alpha1 - org.hibernate:hibernate-ehcache 4.0.0.alpha1 -...

org.hibernate:hibernate-c3p0 (4.3.0.beta4), org.hibernate:hibernate-ehcache (4.3.0.beta4) +7 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.3.0.beta4)

org.hibernate:hibernate-core MAVEN version 4.3.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.3.0.beta4 - org.hibernate:hibernate-ehcache 4.3.0.beta4 -...

de.cinovo.cloudconductor:cloudconductor-server (>=2.6, <=2.12), de.taimos:spring-dao-hibernate (1.6) +9 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.3.3.final)

org.hibernate:hibernate-core MAVEN version 4.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - de.cinovo.cloudconductor:cloudconductor-server =2.6, =2.12 - de.taimos:spring-dao-hibernate 1.6 -...

org.hibernate:hibernate-c3p0 (3.6.0.beta3), org.hibernate:hibernate-ehcache (3.6.0.beta3) +9 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.6.0.beta3)

org.hibernate:hibernate-core MAVEN version 3.6.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 3.6.0.beta3 - org.hibernate:hibernate-ehcache 3.6.0.beta3 -...

com.googlecode.jbp:jbp-hibernate (>=1.0.0, <=1.1.0), com.mykate-soft:scale4j-agent (0.2) +19 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.6.2.final)

org.hibernate:hibernate-core MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.googlecode.jbp:jbp-hibernate =1.0.0, =3.4.0.beta1, =3.4.0.cr1, =3.4.0.beta1, =3.4.0.cr2 and...

org.hibernate:hibernate-c3p0 (4.0.0.cr1), org.hibernate:hibernate-ehcache (4.0.0.cr1) +8 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.0.0.cr1)

org.hibernate:hibernate-core MAVEN version 4.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.cr1 - org.hibernate:hibernate-ehcache 4.0.0.cr1 -...

org.apache-extras.camel-extra:camel-example-hibernate (>=2.12.0, <=2.12.1), org.apache-extras.camel-extra:camel-hibernate (>=2.12.0, <=2.12.1) +20 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.2.4.final)

org.hibernate:hibernate-core MAVEN version 4.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.apache-extras.camel-extra:camel-example-hibernate =2.12.0, =2.12.0, =2.12.0, =2.12.0, =3.3.2,...

org.hibernate:hibernate-annotations (3.5.0-beta-3), org.hibernate:hibernate-c3p0 (3.5.0-beta-3) +12 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-beta-3)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-3 - org.hibernate:hibernate-c3p0 3.5.0-beta-3 -...

org.hibernate.orm.tooling:hibernate-enhance-maven-plugin (5.5.0.alpha1), org.hibernate:hibernate-agroal (5.5.0.alpha1) +16 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (5.5.0.alpha1)

org.hibernate:hibernate-core MAVEN version 5.5.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate.orm.tooling:hibernate-enhance-maven-plugin 5.5.0.alpha1 -...

org.hibernate:hibernate-c3p0 (4.0.0.cr5), org.hibernate:hibernate-ehcache (4.0.0.cr5) +5 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.0.0.cr5)

org.hibernate:hibernate-core MAVEN version 4.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.0.0.cr5 - org.hibernate:hibernate-ehcache 4.0.0.cr5 -...

com.baidu.disconf:disconf-web (>=2.6.20, <=2.6.24), com.github.akiraly.reusable-poms:pom-parent-with-spring-hibernate-querydsl (3) +12 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.3.0.cr1)

org.hibernate:hibernate-core MAVEN version 4.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.baidu.disconf:disconf-web =2.6.20, =0.2.8, =0.2.9 - org.hibernate:hibernate-c3p0 4.3.0.cr1 -...

com.rexsl:rexsl-maven-plugin (>=0.4.13, <=0.7), io.github.divinespear:jpa-schema-gradle-plugin (>=0.1.0, <=0.1.6) +8 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.3.0.beta3)

org.hibernate:hibernate-core MAVEN version 4.3.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.rexsl:rexsl-maven-plugin =0.4.13, =0.1.0, =0.1.0, =0.1.6 - org.hibernate:hibernate-c3p0...

org.hibernate:hibernate-annotations (3.5.0.beta-1), org.hibernate:hibernate-c3p0 (3.5.0.beta-1) +13 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0.beta-1)

org.hibernate:hibernate-core MAVEN version 3.5.0.beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0.beta-1 - org.hibernate:hibernate-c3p0 3.5.0.beta-1 -...

com.emsoft:emsoft-data-hibernate (>=1.0.0, <=1.1.0), com.js-lib:js-hibernate (>=1.1.0, <=1.2.0) +16 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.6.4.final)

org.hibernate:hibernate-core MAVEN version 3.6.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.emsoft:emsoft-data-hibernate =1.0.0, =1.1.0, =1.0.3, =0.5.1, =0.5.2 -...