medium5.6
CVE-2016-6652
Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
Impact
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.springframework.data:spring-data-jpa | < 1.9.6 | 1.9.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Spring Data Jpa | through 1.9.4 Version 1.10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.securityfocus.com/bid/93276
- https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe
- https://jira.spring.io/browse/DATAJPA-965
- https://pivotal.io/security/cve-2016-6652
- https://security.gentoo.org/glsa/201701-01
- https://github.com/advisories/GHSA-xr4v-28rm-pvgw
- https://nvd.nist.gov/vuln/detail/CVE-2016-6652