Skip to content
OpenAdvisories

Product · Spring

Spring Boot

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2019-3797

    Additional information exposure with Spring Data JPA derived queries

    This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parame…

    Spring Spring Boot org.springframework.data:spring-data-jpa Maven