{"action":"Upgrade org.springframework.data:spring-data-rest-core to 3.6.7 (3.6.x) or 3.7.3 (3.7.x) or later.","affected":[{"fixed":"3.6.7","introduced":"3.6.0"},{"fixed":"3.7.3","introduced":"3.7.0"}],"component":"org.springframework.data:spring-data-rest-core","cve_ids":["CVE-2022-31679"],"ecosystem":"Maven","epss":0.00562,"exploited":false,"fixed_versions":["3.6.7","3.7.3"],"ghsa_id":"GHSA-fv7x-v67w-cvqv","id":"tcs_01M5N8WQX7KD0G35VSWF3YKKQP","modified_at":"2024-12-03T06:09:15.620901Z","published_at":"2022-09-22T00:00:24Z","references":["https://osv.dev/vulnerability/GHSA-fv7x-v67w-cvqv","https://nvd.nist.gov/vuln/detail/CVE-2022-31679","https://github.com/spring-projects/spring-data-rest/commit/2ad081f75b4baabfbc139f0dc2b75c54889b4053","https://github.com/spring-projects/spring-data-rest/commit/bf37590b25a0c066f67547b39fb4d7294e2c7cb7","https://github.com/spring-projects/spring-data-rest","https://tanzu.vmware.com/security/cve-2022-31679"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-fv7x-v67w-cvqv","url":"https://osv.dev/vulnerability/GHSA-fv7x-v67w-cvqv"}],"summary":"Spring Data REST can expose hidden entity attributes"}