VYPR

Spring Data Java Persistence API

by Cloudfoundry

CVEs (1)

  • CVE-2019-3797LowMay 6, 2019
    risk 0.23cvss 3.5epss 0.01

    This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter…