CVE-2019-3802lowCWE-155

Additional information exposure with Spring Data JPA example matcher

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 1.2%

probabilidade de exploração

1.2%top 34% das CVEs

exploração observada

nãonenhuma fonte reporta

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Produtos afetados

Spring · Spring Data JPA

Referências

https://pivotal.io/security/cve-2019-3802