Approved changes feed: RSS · Atom

cpe:2.3:a:pivotal_software:spring_data_java_persistance_api:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPivotal Software (a7eef617-cad9-5400-bbf0-2e56b16d90a7)
ProductSpring Data Java Persistance Api (24bbc5a0-f0c6-5d35-81ca-5f4506fff9cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/spring-projects/spring-data-jpa purl2cpe 2026-06-01 10:11:01.207657
pkg:maven/org.springframework.data/spring-data-jpa purl2cpe 2026-06-01 10:11:01.207659

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3802 vulnerable 2026-06-03 14:40:27.550977 Additional information exposure with Spring Data JPA example matcher
LOW (3.5)
This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.
Published: 2019-06-03T13:47:42.791Z
Updated: 2024-09-17T00:22:02.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.