CVE-2016-6652
1 advisory.
Maven/org.springframework.data:spring-data-jpa CVE-2016-6652: medium 5.6, EPSS 0.82%
Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
Action: Upgrade org.springframework.data:spring-data-jpa to 1.9.6 (1.9.x) or 1.10.4 (1.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.6 | - |
| 1.10.0 | 1.10.4 | - |
Fixed versions
| 1.9.6 | 1.10.4 |
Sources
- osv: GHSA-xr4v-28rm-pvgw
- https://nvd.nist.gov/vuln/detail/CVE-2016-6652
- https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe
- https://jira.spring.io/browse/DATAJPA-965
- https://pivotal.io/security/cve-2016-6652
- https://security.gentoo.org/glsa/201701-01
- http://www.securityfocus.com/bid/93276
CVE-2016-6652 · published · modified · JSON