← CVE Intelligence

CVE-2022-31679

n/a / Spring Data REST PUBLISHED

Description (CNA)

Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.

Affected (CNA)

Vendor / productVersions
n/a / Spring Data RESTaffected Spring Data REST Versions before 3.6.7 and 3.7.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.