CVE-2016-6652 Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
MediumCVSS 5.6
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.data/spring-data-jpa(Maven) | < 1.9.6 | 1.9.6 |
| org.springframework.data/spring-data-jpa(Maven) | >= 1.10.0, < 1.10.4 | 1.10.4 |
| org.springframework.data/spring-data-jpa(Maven) | = 1.0.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.0.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.0.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.0.3.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.1.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.1.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.1.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.2.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.2.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.3.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.4.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.3.5.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.3.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.4.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.4.5.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.5.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.5.1.RELEASE | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.data/spring-data-jpa(Maven) | = 1.5.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.5.3.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.4.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.5.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.6.6.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.7.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.7.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.7.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.7.3.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.7.4.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.8.0.RC1 | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.8.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.8.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.8.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.9.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.9.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.9.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.9.4.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.9.5.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.10.0.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.10.1.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.10.2.RELEASE | No fix listed |
| org.springframework.data/spring-data-jpa(Maven) | = 1.10.3.RELEASE | No fix listed |
| pivotal software spring data jpa | <= 1.9.4 | No fix listed |
| pivotal software spring data jpa | = 1.10.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- jira.spring.io mitigation vendor-advisory
- pivotal.io vendor-advisory
- GLSA-201701-01 vendor-advisory
- 93276 vdb-entry
- github.com