Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-jpa

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2016-6652

    Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

    SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands v…

    org.springframework.data:spring-data-jpa Maven