Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-jpa

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 3.5
    CVE-2019-3802

    Additional information exposure with Spring Data JPA example matcher

    This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than a…

    Spring Spring Data JPA org.springframework.data:spring-data-jpa Maven
  • Low 3.5
    CVE-2019-3797

    Additional information exposure with Spring Data JPA derived queries

    This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parame…

    Spring Spring Boot org.springframework.data:spring-data-jpa Maven
  • Medium 5.6
    CVE-2016-6652

    Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

    SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands v…

    org.springframework.data:spring-data-jpa Maven