PT-2019-16726 · Spring · Spring Data Jpa

Maruthi Adithya G · Published 2019-05-06 · Updated 2020-02-10 · CVE-2019-3797

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spring Data JPA versions up to and including 2.1.5 Spring Data JPA version 2.0.13 Spring Data JPA version 1.11.19

Description The issue affects derived queries that use certain predicates, such as startingWith, endingWith, or containing. When a maliciously crafted query parameter value is supplied, these queries could return more results than anticipated. Additionally, LIKE expressions in manually defined queries may return unexpected results if the parameter values bound do not have escaped reserved characters properly.

Recommendations For Spring Data JPA version 2.1.5, update to a version that includes the necessary fixes to prevent unexpected query results. For Spring Data JPA version 2.0.13, update to a version that includes the necessary fixes to prevent unexpected query results. For Spring Data JPA version 1.11.19, update to a version that includes the necessary fixes to prevent unexpected query results. As a temporary workaround, consider properly escaping reserved characters in query parameter values to minimize the risk of exploitation.

Fix

Information Disclosure

SQL injection

Weakness Enumeration

CWE-200

CWE-89

Related Identifiers

CVE-2019-3797

GHSA-JGMR-WRWX-MGFJ

Affected Products

Spring Data Jpa

References · 4

• https://osv.dev/vulnerability/GHSA-jgmr-wrwx-mgfj · Vendor Advisory
• https://pivotal.io/security/cve-2019-3797 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3797 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3797 · Vendor Advisory