Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-3802

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xggx-fx6w-v7ch

Improper Neutralization of Wildcards or Matching Symbols This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.

gitlab/maven/org.springframework.data/spring-data-jpa/CVE-2019-3802

Information exposure with example matcher `ExampleMatcher` using `ExampleMatcher.StringMatcher.STARTING`, `ExampleMatcher.StringMatcher.ENDING` or `ExampleMatcher.StringMatcher.CONTAINING` could return more results than anticipated when a maliciously crafted example value is supplied.