Information Disclosure

2022-09-2309:23:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

information disclosure

spring-data-rest-webmvc

json patch

entity attributes

http requests

0.001 Low

EPSS

Percentile

42.3%

JSON

spring-data-rest-webmvc is vulnerable to information disclosure. The vulnerability exists due to the improper implementation of the JSON patch in the library, allowing an attacker to get information about the hidden entity attributes through maliciously crafted HTTP requests.

CPENameOperatorVersion
spring data rest - webmvcle3.7.2
spring data rest - webmvcle4.0.0-M6
spring data rest - webmvcle3.6.6
spring data rest - webmvcle3.7.2
spring data rest - webmvcle4.0.0-M6
spring data rest - webmvcle3.6.6

Name	Operator	Version
spring data rest - webmvc	le	3.7.2
spring data rest - webmvc	le	4.0.0-M6
spring data rest - webmvc	le	3.6.6
spring data rest - webmvc	le	3.7.2
spring data rest - webmvc	le	4.0.0-M6
spring data rest - webmvc	le	3.6.6