← CVE Intelligence

CVE-2019-3802

Additional information exposure with Spring Data JPA example matcher PUBLISHED

Description (CNA)

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.

Affected (CNA)

Vendor / productVersions
Spring / Spring Data JPAaffected 2.1 before 2.1.8.RELEASE; affected 1.11 before 1.11.22.RELEASE

CWE

CWE-155

References

ADP enrichment

CVE

No English description supplied.