SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4
    (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows
    attackers to execute arbitrary JPQL commands via a sort instance with a function call. (CVE-2016-6652)

The remote host is affected by the vulnerability described in GLSA-201701-01 (MariaDB and MySQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MariaDB and MySQL.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Attackers could execute arbitrary code, escalate privileges, and impact       availability via unspecified vectors.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
420634	SCA: security update for org.springframework.data:spring-data-jpa (GHSA-xr4v-28rm-pvgw)	Tenable Cloud Security	SCA Checks	medium
420634	SCA: security update for org.springframework.data:spring-data-jpa (GHSA-xr4v-28rm-pvgw)	Tenable Self-Hosted Container Security	SCA Checks	medium
96232	GLSA-201701-01 : MariaDB and MySQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-6652

medium

Tenable Plugins

medium

medium

critical