GHSA-xr4v-28rm-pvgwMediumCVSS 5.6
Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
🔗 CVE IDs covered (1)
📋 Description
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.
🎯 Affected products2
- maven/org.springframework.data:spring-data-jpa:< 1.9.6
- maven/org.springframework.data:spring-data-jpa:>= 1.10.0, < 1.10.4
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2016-6652
- https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe
- https://jira.spring.io/browse/DATAJPA-965
- https://pivotal.io/security/cve-2016-6652
- https://security.gentoo.org/glsa/201701-01
- http://www.securityfocus.com/bid/93276
- https://github.com/advisories/GHSA-xr4v-28rm-pvgw