PT-2016-7022 · Pivotal · Spring Data Jpa

Antti Ahola + 5 · Publicado 2016-10-05 · Atualizado 2022-05-17 · CVE-2016-6652

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pivotal Spring Data JPA versions prior to 1.9.6 (Gosling SR6) Pivotal Spring Data JPA versions 1.10.x prior to 1.10.4 (Hopper SR4)

Description The issue allows attackers to execute arbitrary JPQL commands via a sort instance with a function call, when used with a repository that defines a String query using the @Query annotation.

Recommendations For Pivotal Spring Data JPA versions prior to 1.9.6 (Gosling SR6), update to version 1.9.6 or later. For Pivotal Spring Data JPA versions 1.10.x prior to 1.10.4 (Hopper SR4), update to version 1.10.4 or later. As a temporary workaround, consider restricting the use of the @Query annotation in repositories that define String queries.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2016-6652

GHSA-XR4V-28RM-PVGW

Produtos afetados

Spring Data Jpa

Referências · 9

• https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe · Correção
• https://osv.dev/vulnerability/CVE-2016-6652 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-xr4v-28rm-pvgw · Aviso do Fabricante
• https://security.gentoo.org/glsa/201701-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6652 · Nota de Segurança
• http://securityfocus.com/bid/93276 · Nota
• https://pivotal.io/security/cve-2016-6652 · Aviso do Fabricante
• https://jira.spring.io/browse/DATAJPA-965 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6652 · Nota