Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-rest-core

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2022-31679

    Spring Data REST can expose hidden entity attributes

    Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests …

    org.springframework.data:spring-data-rest-core Maven