Exposure of Resource to Wrong Sphere in Spring Data REST

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-22047 · ADVISORY
• tanzu.vmware.com/security/cve-2021-22047 · WEB

Lỗ hổng khác của org.springframework.data:spring-data-rest-core

• CVE-2026-41837TRUNG BÌNH 5.3Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider J…
• CVE-2026-41730TRUNG BÌNH 5.3Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals…
• CVE-2026-41729CAO 8.1Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch (application/json-patch+…
• CVE-2026-41728CAO 7.5Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to intermediate path segme…
• CVE-2022-31679THẤP 3.7Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsup…