Skip to content
Sign in
3.7 Low

CVE-2022-31679 Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 -…

Description

Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.

Affected products and versions

Product Affected versions Fixed in
Spring Data REST Versions not published

Other CVEs of Spring Data REST

The 2 CVEs of Spring Data REST →
CVE-2021-22047 In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented… Not rated
Track this CVE