Medium severity · published Oct 5, 2016
CVE-2016-6652
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query…
5.6
CVSS
0.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Spring Data Jpa · Pivotal Software
through 1.9.4; 1.10.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6652
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6652
www.securityfocus.com
http://www.securityfocus.com/bid/93276
Patch
https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe
Mitigation
https://jira.spring.io/browse/DATAJPA-965
Vendor Advisory
https://pivotal.io/security/cve-2016-6652
security.gentoo.org
https://security.gentoo.org/glsa/201701-01