Spring Data Jpa
Monthly
Sort validation bypass in Spring Data JPA allows remote, unauthenticated attackers to submit crafted payloads through untrusted sort parameters, circumventing the library's built-in Sort validation and potentially injecting malicious ordering expressions into the underlying JPA query layer. Affected versions span four release trains from 3.0.0 through 4.1.0, placing a large fraction of Spring Boot applications at risk where dynamic sorting is exposed to user-controlled input. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the 'Authentication Bypass' tag suggests practical risk may exceed what the CVSS 4.8 score implies.
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required.
Sort validation bypass in Spring Data JPA allows remote, unauthenticated attackers to submit crafted payloads through untrusted sort parameters, circumventing the library's built-in Sort validation and potentially injecting malicious ordering expressions into the underlying JPA query layer. Affected versions span four release trains from 3.0.0 through 4.1.0, placing a large fraction of Spring Boot applications at risk where dynamic sorting is exposed to user-controlled input. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the 'Authentication Bypass' tag suggests practical risk may exceed what the CVSS 4.8 score implies.
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required.